---
title: "Application layer policies to control ingress traffic"
description: "Restrict ingress traffic to Calico Cloud workloads by HTTP method, path, or other Layer-7 attributes using application-layer policy."
product: "Calico Cloud"
version: "v23.0.1"
section: "Network policy"
canonical_url: "https://docs.tigera.io/calico-cloud/network-policy/application-layer-policies/"
---

# Application layer policies to control ingress traffic

## [📄️Enable and enforce application layer policies](https://docs.tigera.io/calico-cloud/network-policy/application-layer-policies/alp.md)

[Configure access controls based on Layer-7 attributes by enforcing Calico Cloud application-layer policy in connected clusters.](https://docs.tigera.io/calico-cloud/network-policy/application-layer-policies/alp.md)

## [📄️Application layer policy tutorial](https://docs.tigera.io/calico-cloud/network-policy/application-layer-policies/alp-tutorial.md)

[Step-by-step tutorial for applying Calico Cloud application-layer policy to workloads in a connected cluster — control ingress traffic by HTTP attributes.](https://docs.tigera.io/calico-cloud/network-policy/application-layer-policies/alp-tutorial.md)