Conditional Access - Block Access to Cloud Apps - Not Entra Joined Devices

Hello everyone and greetings from Portugal, I'm fairly new to Conditional Access, and I'm trying to create a policy to block access to cloud apps from devices that are not Azure/Entra Joined Devices...