Access control policies allow you to administratively manage which producers can publish on a topic and which consumers can subscribe to a topic, thereby controlling the movement of data.