Configure Azure Application Gateway Private Link

We are using this approach to expose our applications which are running on AKS but at the same time, we wanted to deny all client's private endpoint connections.

We used Azure policy for deny but it won't work..
next, how to auto approve for a specific subscription, can you help with this?

{
  "mode": "All",
  "policyRule": {
    "if": {
      "allOf": [
        {
          "equals": "Microsoft.Network/privateEndpoints",
          "field": "type"
        },
        {
          "anyOf": [
            {
              "count": {
                "field": "Microsoft.Network/privateEndpoints/manualprivateLinkServiceConnections[*]",
                "where": {
                  "allOf": [
                    {
                      "field": "Microsoft.Network/privateEndpoints/manualPrivateLinkServiceConnections[*].privateLinkServiceId",
                      "notEquals": ""
                    },
                    {
                      "value": "[split(concat(first(field('Microsoft.Network/privateEndpoints/manualprivateLinkServiceConnections[*].privateLinkServiceId')), '//'), '/')[2]]",
                      "notEquals": "[subscription().subscriptionId]"
                    }
                  ]
                }
              },
              "greaterOrEquals": 1
            },
            {
              "count": {
                "field": "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]",
                "where": {
                  "allOf": [
                    {
                      "field": "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId",
                      "notEquals": ""
                    },
                    {
                      "value": "[split(concat(first(field('Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId')), '//'), '/')[2]]",
                      "notEquals": "[subscription().subscriptionId]"
                    }
                  ]
                }
              },
              "greaterOrEquals": 1
            }
          ]
        }
      ]
    },
    "then": {
      "effect": "deny"
    }
  }
}