Enforcing K8S NetworkPolicy on AWS with Pod Label selector (Calico/Cillium)?

Question

I am trying to enforce ingress/egress network policies based on Pod label selector. My goal is to do a PoC of Pod isolation by means of changing label dynamically and have n