Workload Identity and Access Management basically means that you need to make sure authorized apps on one side of a request can access apps on the other.
The idea of traffic steering is simple. Rather than sending it directly to its destination, we want to first send it to a proxy to inspect and modify it.