Restrict http operations to a service out of the mesh

Hello all,

I am trying to define a HTTP rule to only access with GET to a Service that is out of the mesh from services that are in the mesh. I have thought about using a virtual service and defining a corsPolicy, but I don’t know what the correct approach would be.

Thanks in advance