All Products
Search
Document Center

Elastic IP Address:Custom policies for EIP

Last Updated:Apr 01, 2026

When system policies don't meet your requirements, create custom policies to implement least privilege and fine-grained access control for elastic IP addresses (EIPs).

What is a custom policy?

Resource Access Management (RAM) supports two types of policies: system policies and custom policies. Unlike system policies, which are managed by Alibaba Cloud, custom policies are created and maintained by you.

Custom policies differ from system policies in the following ways:

  • Attach to a principal to take effect. After creating a custom policy, attach it to a RAM user, user group, or RAM role. Permissions in the policy are not granted until the policy is attached.

  • Detach before deleting. A custom policy attached to a principal cannot be deleted. Detach it from all principals first.

  • Support version management. RAM maintains a version history for each custom policy. You can manage custom policy versions based on the version management mechanism provided by RAM.

EIP authorization information

Before writing a custom policy for EIP, review the list of EIP operations and their supported resource types.

See RAM authorization for the complete EIP authorization reference, including operation names, access levels, and applicable resource types.

What's next

Use these resources to create and manage custom policies for EIP: