在使用RAM帳號調用SLB API前,需要主帳號通過建立授權策略對RAM帳號進行授權。在授權策略中,使用資源描述符(Alibaba Cloud Resource Name, ARN)指定授權資源。
可授權的負載平衡資源類型
在進行RAM子帳號授權時,SLB資源的描述方式如下:
資源類型 | 授權策略中的資源描述方法 |
---|---|
LoadBalancer | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:slb:$regionid:$accountid:loadbalancer/* | |
acs:slb:*:$accountid:loadbalancer/* | |
acs:slb:*:*:loadbalancer/* | |
Certificate | acs:slb:$regionid:$accountid:certificate/$servercertificateId |
acs:slb:$regionid:$accountid:certificate/* |
其中$regionid/accoutid/servercertificateId
為具體的資源ID,*
代表對應的所有資源。
可授權的SLB介面
下表列舉了SLB中可授權的API及其描述方式:
API | 資源描述 |
---|---|
CreateLoadBalancer | acs:slb:$regionid:$accountid:loadbalancer/* |
ModifyLoadBalancerInternetSpec | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DeleteLoadBalancer | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
SetLoadBalancerStatus | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
SetLoadBalancerName | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeLoadBalancers | acs:slb:$regionid:$accountid:loadbalancer/* |
DescribeLoadBalancerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeRegions | acs:slb:*:$accountid:* |
UploadServerCertificate | acs:slb:%s:%s:certificate/* |
DeleteServerCertificate | acs:slb:%s:%s:certificate/% |
DescribeServerCertificate | acs:slb:%s:%s:certificate/% |
SetServerCertificateName | acs:slb:%s:%s:certificate/% |
DescribeServerCertificates | acs:slb:%s:%s:certificate/* |
CreateLoadBalancerHTTPListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
CreateLoadBalancerHTTPSListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:slb:%s:%s:certificate/% | |
CreateLoadBalancerTCPListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
CreateLoadBalancerUDPListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DeleteLoadBalancerListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
StartLoadBalancerListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
StopLoadBalancerListener | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
SetLoadBalancerHTTPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
SetLoadBalancerHTTPSListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:slb:%s:%s:certificate/% | |
SetLoadBalancerTCPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
SetLoadBalancerUDPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeLoadBalancerHTTPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeLoadBalancerHTTPSListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeLoadBalancerTCPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeLoadBalancerUDPListenerAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
AddBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
RemoveBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
SetBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
DescribeHealthStatus | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
CreateVServerGroup | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
SetVServerGroupAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DeleteVServerGroup | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeVServerGroups | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
DescribeVServerGroupAttribute | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
AddVServerGroupBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
RemoveVServerGroupBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid | |
ModifyVServerGroupBackendServers | acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid |
acs:ecs:$regionid:$accountid:instance/$instanceid |