ELB
Prefix elasticloadbalancing, 77 actions · Domain Networking & Content Delivery
48 AWS managed policies. 6 have reviewed guidance; the rest have authoritative permission data pending editorial review. 17 are service-linked role policies, shown with permission data only.
User access (9)
- AdministratorAccess-AWSElasticBeanstalkAdmin
- AmazonEC2FullAccessAdmin
- AutoScalingConsoleFullAccessAdmin
- AutoScalingConsoleReadOnlyAccessReader
- AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccessAdmin
- AWSMigrationHubRefactorSpacesFullAccessAdmin
- ElasticLoadBalancingFullAccessAdmin
- ElasticLoadBalancingReadOnlyReader
- NetworkAdministratorAdmin
Operator and limited (10)
- AmazonECSInfrastructureRoleForGatewayHostSharedALBOperator
- AmazonECSInfrastructureRolePolicyForLoadBalancersOperator
- AmazonEKSClusterPolicyOperator
- AmazonEKSLoadBalancingPolicyOperator
- AmazonVPCNetworkAccessAnalyzerFullAccessPolicyOperator
- AmazonVPCReachabilityAnalyzerFullAccessPolicyOperator
- AWSApplicationMigrationNetworkMigrationMultiAccountOperator
- AWSCodeDeployRoleForECSOperator
- AWSCodeDeployRoleForECSLimitedOperator
- AWSElasticBeanstalkEKSTaggingOperator
Service roles (12)
- AmazonEC2ContainerServiceRoleOperator
- AmazonEC2SpotFleetTaggingRoleOperator
- AmazonECSInfrastructureRoleforExpressGatewayServicesOperator
- AmazonEMRServicePolicyForSessionsOperator
- AWSApplicationMigrationFSxProxyVPCPolicyOperator
- AWSCodeDeployRoleOperator
- AWSCodeStarServiceRoleAdmin
- AWSElasticBeanstalkEnhancedHealthOperator
- AWSElasticBeanstalkRoleCoreOperator
- ROSAIngressOperatorPolicyOperator
- ROSAKubeControllerPolicyOperator
- ROSASRESupportPolicyOperator
Service-linked roles (17)
- AmazonEKSServiceRolePolicyOperator
- AmazonElasticsearchServiceRolePolicyOperator
- AmazonEMRContainersServiceRolePolicyOperator
- AmazonInspectorServiceRolePolicyReader
- AmazonOpenSearchServiceRolePolicyOperator
- APIGatewayServiceRolePolicyOperator
- AWSCloudFrontVPCOriginServiceRolePolicyOperator
- AWSEC2SpotFleetServiceRolePolicyOperator
- AWSElasticBeanstalkMaintenanceOperator
- AWSElasticBeanstalkServiceRolePolicyOperator
- AWSGlobalAcceleratorSLRPolicyOperator
- AWSM2ServicePolicyOperator
- AWSMigrationHubRefactorSpacesServiceRolePolicyOperator
- AWSReachabilityAnalyzerServiceRolePolicyOperator
- AWSZonalAutoshiftPracticeRunSLRPolicyOperator
- CloudWatchInternetMonitorServiceRolePolicyOperator
- CloudWatchNetworkFlowMonitorTopologyServiceRolePolicyOperator
Also grants ELB actions (69)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDevOpsGuruServiceRolePolicy
- AmazonEC2ReadOnlyAccess
- AmazonECS_FullAccess
- AmazonECSServiceRolePolicy
- AmazonInspector2ServiceRolePolicy
- AmazonLaunchWizardFullAccessV2
- AmazonRoute53FullAccess
- AmazonSageMakerHyperPodInferenceAccess
- AssuranceServiceRolePolicy
- AutoScalingFullAccess
- AutoScalingServiceRolePolicy
- AWS_ConfigRole
- AWSApplicationMigrationFullAccess
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSContinuumCollectorServiceRolePolicy
- AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
- AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
- AWSElasticBeanstalkReadOnly
- AWSElasticBeanstalkService
- AWSElasticDisasterRecoveryConsoleFullAccess
- AWSElasticDisasterRecoveryConsoleFullAccess_v2
- AWSFMAdminFullAccess
- AWSMcpServiceActionsFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSShieldDRTAccessPolicy
- AWSSupportServiceRolePolicy
- AWSTransformNetworkMigrationAgentPolicy
- AWSTransformServerMigrationAgentPolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWAFConsoleFullAccess
- AWSWAFConsoleReadOnlyAccess
- AWSWAFFullAccess
- AWSWAFReadOnlyAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudFrontFullAccess
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchInternetMonitorFullAccess
- CloudWatchOmniAWSIntegrationPolicy
- FMSServiceRolePolicy
- GlobalAcceleratorFullAccess
- NetworkSecurityDirectorServiceLinkedRolePolicy
- NetworkSecurityManagerServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- ROSAInstallerPolicy
- Route53RecoveryReadinessServiceRolePolicy
- SecurityAudit
- ServiceQuotasFullAccess
- ServiceQuotasReadOnlyAccess
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- VPCLatticeFullAccess
- VPCLatticeReadOnlyAccess
- WellArchitectedAgentResourceScanning
addlistenercertificates addtags addtruststorerevocations allowvendedlogdeliveryforresource applysecuritygroupstoloadbalancer attachloadbalancertosubnets configurehealthcheck createappcookiestickinesspolicy createlbcookiestickinesspolicy createlistener createloadbalancer createloadbalancerlisteners createloadbalancerpolicy createrule createtargetgroup createtruststore createwebaclassociation deletelistener deleteloadbalancer deleteloadbalancerlisteners deleteloadbalancerpolicy deleterule deletesharedtruststoreassociation deletetargetgroup deletetruststore deletewebaclassociation deregisterinstancesfromloadbalancer deregistertargets describeaccountlimits describecapacityreservation describeinstancehealth describelistenerattributes describelistenercertificates describelisteners describeloadbalancerattributes describeloadbalancerpolicies describeloadbalancerpolicytypes describeloadbalancers describerules describesslpolicies describetags describetargetgroupattributes describetargetgroups describetargethealth describetruststoreassociations describetruststorerevocations describetruststores describewebaclassociation detachloadbalancerfromsubnets disableavailabilityzonesforloadbalancer enableavailabilityzonesforloadbalancer getloadbalancerwebacl getresourcepolicy gettruststorecacertificatesbundle gettruststorerevocationcontent modifycapacityreservation modifyippools modifylistener modifylistenerattributes modifyloadbalancerattributes modifyrule modifytargetgroup modifytargetgroupattributes modifytruststore registerinstanceswithloadbalancer registertargets removelistenercertificates removetags removetruststorerevocations setipaddresstype setloadbalancerlistenersslcertificate setloadbalancerpoliciesforbackendserver setloadbalancerpoliciesoflistener setrulepriorities setsecuritygroups setsubnets setwebacl
Actions (77)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| elasticloadbalancing:AddListenerCertificates | Write | 11 | 6 |
| elasticloadbalancing:AddTags | Tagging | 12 | 18 |
| elasticloadbalancing:AddTrustStoreRevocations | Write | 9 | 2 |
| elasticloadbalancing:AllowVendedLogDeliveryForResource | Permissions management | 9 | 3 |
| elasticloadbalancing:ApplySecurityGroupsToLoadBalancer | Write | 12 | 4 |
| elasticloadbalancing:AttachLoadBalancerToSubnets | Write | 10 | 3 |
| elasticloadbalancing:ConfigureHealthCheck | Write | 12 | 4 |
| elasticloadbalancing:CreateAppCookieStickinessPolicy | Write | 9 | 3 |
| elasticloadbalancing:CreateLBCookieStickinessPolicy | Write | 9 | 3 |
| elasticloadbalancing:CreateListener | Write | 11 | 16 |
| elasticloadbalancing:CreateLoadBalancer | Write | 12 | 16 |
| elasticloadbalancing:CreateLoadBalancerListeners | Write | 10 | 7 |
| elasticloadbalancing:CreateLoadBalancerPolicy | Write | 11 | 3 |
| elasticloadbalancing:CreateRule | Write | 10 | 8 |
| elasticloadbalancing:CreateTargetGroup | Write | 11 | 17 |
| elasticloadbalancing:CreateTrustStore | Write | 9 | 3 |
| elasticloadbalancing:CreateWebACLAssociation | Write | 9 | 7 |
| elasticloadbalancing:DeleteListener | Write | 11 | 14 |
| elasticloadbalancing:DeleteLoadBalancer | Write | 13 | 15 |
| elasticloadbalancing:DeleteLoadBalancerListeners | Write | 10 | 4 |
| elasticloadbalancing:DeleteLoadBalancerPolicy | Write | 9 | 3 |
| elasticloadbalancing:DeleteRule | Write | 10 | 7 |
| elasticloadbalancing:DeleteSharedTrustStoreAssociation | Write | 9 | 3 |
| elasticloadbalancing:DeleteTargetGroup | Write | 11 | 16 |
| elasticloadbalancing:DeleteTrustStore | Write | 9 | 3 |
| elasticloadbalancing:DeleteWebACLAssociation | Write | 9 | 7 |
| elasticloadbalancing:DeregisterInstancesFromLoadBalancer | Write | 16 | 5 |
| elasticloadbalancing:DeregisterTargets | Write | 17 | 12 |
| elasticloadbalancing:DescribeAccountLimits | Read | 35 | 1 |
| elasticloadbalancing:DescribeCapacityReservation | Read | 32 | 5 |
| elasticloadbalancing:DescribeInstanceHealth | Read | 41 | 1 |
| elasticloadbalancing:DescribeListenerAttributes | Read | 33 | 5 |
| elasticloadbalancing:DescribeListenerCertificates | Read | 35 | 1 |
| elasticloadbalancing:DescribeListeners | Read | 61 | 6 |
| elasticloadbalancing:DescribeLoadBalancerAttributes | Read | 52 | 5 |
| elasticloadbalancing:DescribeLoadBalancerPolicies | Read | 37 | 2 |
| elasticloadbalancing:DescribeLoadBalancerPolicyTypes | Read | 33 | 1 |
| elasticloadbalancing:DescribeLoadBalancers | List | 90 | 7 |
| elasticloadbalancing:DescribeRules | Read | 50 | 4 |
| elasticloadbalancing:DescribeSSLPolicies | Read | 34 | 1 |
| elasticloadbalancing:DescribeTags | Read | 49 | 7 |
| elasticloadbalancing:DescribeTargetGroupAttributes | Read | 46 | 5 |
| elasticloadbalancing:DescribeTargetGroups | Read | 74 | 6 |
| elasticloadbalancing:DescribeTargetHealth | Read | 67 | 6 |
| elasticloadbalancing:DescribeTrustStoreAssociations | Read | 30 | 1 |
| elasticloadbalancing:DescribeTrustStoreRevocations | Read | 31 | 2 |
| elasticloadbalancing:DescribeTrustStores | Read | 32 | 2 |
| elasticloadbalancing:DescribeWebACLAssociation | List | 33 | 1 |
| elasticloadbalancing:DetachLoadBalancerFromSubnets | Write | 10 | 3 |
| elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer | Write | 9 | 2 |
| elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer | Write | 9 | 2 |
| elasticloadbalancing:GetLoadBalancerWebACL | Read | 10 | 8 |
| elasticloadbalancing:GetResourcePolicy | Read | 13 | 2 |
| elasticloadbalancing:GetTrustStoreCaCertificatesBundle | Read | 12 | 2 |
| elasticloadbalancing:GetTrustStoreRevocationContent | Read | 12 | 2 |
| elasticloadbalancing:ModifyCapacityReservation | Write | 9 | 4 |
| elasticloadbalancing:ModifyIpPools | Write | 9 | 4 |
| elasticloadbalancing:ModifyListener | Write | 13 | 8 |
| elasticloadbalancing:ModifyListenerAttributes | Write | 9 | 6 |
| elasticloadbalancing:ModifyLoadBalancerAttributes | Write | 11 | 9 |
| elasticloadbalancing:ModifyRule | Write | 11 | 7 |
| elasticloadbalancing:ModifyTargetGroup | Write | 10 | 7 |
| elasticloadbalancing:ModifyTargetGroupAttributes | Write | 10 | 9 |
| elasticloadbalancing:ModifyTrustStore | Write | 9 | 3 |
| elasticloadbalancing:RegisterInstancesWithLoadBalancer | Write | 16 | 7 |
| elasticloadbalancing:RegisterTargets | Write | 16 | 19 |
| elasticloadbalancing:RemoveListenerCertificates | Write | 11 | 6 |
| elasticloadbalancing:RemoveTags | Tagging | 10 | 5 |
| elasticloadbalancing:RemoveTrustStoreRevocations | Write | 9 | 2 |
| elasticloadbalancing:SetIpAddressType | Write | 9 | 3 |
| elasticloadbalancing:SetLoadBalancerListenerSSLCertificate | Write | 9 | 2 |
| elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer | Write | 11 | 2 |
| elasticloadbalancing:SetLoadBalancerPoliciesOfListener | Write | 10 | 4 |
| elasticloadbalancing:SetRulePriorities | Write | 10 | 4 |
| elasticloadbalancing:SetSecurityGroups | Write | 9 | 8 |
| elasticloadbalancing:SetSubnets | Write | 9 | 3 |
| elasticloadbalancing:SetWebAcl | Write | 13 | 6 |