CAM 中可授权的资源类型
资源类型 | 接口说明 |
实例 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
监听器 | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
转发规则 | qcs::alb:{region}:uin/{uin}:rule/{ruleId} |
目标组 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
安全策略 | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
健康检查 | qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId} |
其中：
{region} 为具体地域（如 ap-guangzhou），可留空表示所有地域。
uin/{uin} 中 {uin} 为资源所属主账号 UIN，或填 * 表示所有账号。
{loadBalancerId}、{ruleId}、{listenerId} 、{targetGroupId}、{securityPolicyId}、{templateId}等为具体资源，或填 * 表示该类型全部资源。
ALB 中可在 CAM 授权的 API
您可以针对以下资源类型，在 CAM 中对 ALB 的相关接口进行授权。同一接口可能涉及多个资源，下文按资源类型分组列出，并给出该资源对应的六段式格式。
实例相关
API 操作 | 资源描述 | 接口说明 |
CreateLoadBalancer | 创建应用负载均衡实例 | qcs::alb:{region}:uin/{uin}:loadbalancer/* |
| | qcs::vpc:{region}:uin/{uin}:vpc/{vpcId} |
| | qcs::vpc:{region}:uin/{uin}:subnet/{subnetId} |
| | qcs::vpc:{region}:uin/{uin}:eip/{eipId} |
| | qcs::vpc:{region}:uin/{uin}:bwp/{bandwidthPackageId} |
| | qcs::vpc:{region}:uin/{uin}:bwp/{bandwidthPackageId} |
DeleteLoadBalancers | 删除应用负载均衡实例 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
ModifyLoadBalancerAttributes | 修改负载均衡实例属性 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
ModifyLoadBalancerModificationProtection | 修改负载均衡实例删除保护 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
SetLoadBalancerSecurityGroups | 配置负载均衡安全组 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
ModifyLoadBalancerAddressType | 修改负载均衡网络类型（公网/私网） | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
AssociateBandwidthPackageWithLoadBalancer | 负载均衡绑定带宽包 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
DisassociateBandwidthPackageFromLoadBalancer | 负载均衡解绑带宽包 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
DescribeLoadBalancerDetail | 查询负载均衡实例详情 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
DescribeLoadBalancers | 查询负载均衡实例列表 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
监听器相关
API 操作 | 资源描述 | 接口说明 |
CreateListener | 创建监听器 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/* |
| | qcs::certificate:{region}:uin/{uin}:certificate/{certificateId} |
| | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
| | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
DeleteListener | 删除监听器 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
ModifyListenerAttributes | 修改监听器属性 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::certificate:{region}:uin/{uin}:certificate/{certificateId} |
| | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
| | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
DescribeListenerDetail | 查询监听器详情 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
DescribeListeners | 查询监听器列表 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
DescribeListenerHealthStatus | 查询监听器健康检查状态 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
DescribeListenerCertificates | 查询监听器证书 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
AssociateListenerAdditionalCertificates | 绑定监听器扩展证书 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::certificate:{region}:uin/{uin}:certificate/{certificateId} |
DisassociateListenerAdditionalCertificates | 解绑监听器扩展证书 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::certificate:{region}:uin/{uin}:certificate/{certificateId} |
转发规则相关
API 操作 | 资源描述 | 接口说明 |
CreateRules | 创建转发规则 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::alb:{region}:uin/{uin}:rule/* |
| | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
DeleteRules | 删除转发规则 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::alb:{region}:uin/{uin}:rule/{ruleId} |
ModifyRulesAttributes | 修改转发规则属性 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
| | qcs::alb:{region}:uin/{uin}:rule/{ruleId} |
| | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
DescribeRules | 查询转发规则 | qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId} |
| | qcs::alb:{region}:uin/{uin}:listener/{listenerId} |
目标组相关
API 操作 | 资源描述 | 接口说明 |
CreateTargetGroup | 创建目标组 | qcs::alb:{region}:uin/{uin}:targetgroup/* |
| | qcs::vpc:{region}:uin/{uin}:vpc/{vpcId} |
DeleteTargetGroups | 删除目标组 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
ModifyTargetGroupAttributes | 修改目标组属性 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
DescribeTargetGroupTargets | 查询目标组后端（RS）列表 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
DescribeTargetGroups | 查询目标组列表 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
AddTargetsToTargetGroup | 目标组添加后端 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
| | qcs::cvm:{region}:uin/{uin}:instance/{instanceId} |
| | qcs::vpc:{region}:uin/{uin}:eni/{eniId} |
RemoveTargetsFromTargetGroup | 目标组移除后端 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
| | qcs::cvm:{region}:uin/{uin}:instance/{instanceId} |
| | qcs::vpc:{region}:uin/{uin}:eni/{eniId} |
ModifyTargetsInTargetGroup | 修改目标组后端 | qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId} |
| | qcs::cvm:{region}:uin/{uin}:instance/{instanceId} |
| | qcs::vpc:{region}:uin/{uin}:eni/{eniId} |
安全策略相关
API 操作 | 资源描述 | 接口说明 |
DeleteSecurityPolicy | 删除安全策略 | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
ModifySecurityPolicyAttributes | 修改安全策略属性 | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
DescribeSecurityPolicies | 查询安全策略列表 | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
DescribeSecurityPolicyRelations | 查询安全策略关联 | qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId} |
健康检查模板相关
API 操作 | 资源描述 | 接口说明 |
CreateHealthCheckTemplate | 创建健康检查模板 | qcs::alb:{region}:uin/{uin}:healthchecktemplate/* |
DeleteHealthCheckTemplates | 删除健康检查模板 | qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId} |
ModifyHealthCheckTemplate | 修改健康检查模板 | qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId} |
DescribeHealthCheckTemplates | 查询健康检查模板 | qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId} |
