在使用RAM账号调用SLB API前,需要主账号通过创建授权策略对RAM账号进行授权。在授权策略中,使用资源描述符(Alibaba Cloud Resource Name, ARN)指定授权资源。 可授权的负载均衡资源类型 在进行RAM子账号授权时,SLB资源的描述方式如下:
资源类型 授权策略中的资源描述方法 LoadBalancer acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:slb:$regionid:$accountid:loadbalancer/* acs:slb::$accountid:loadbalancer/ acs:slb:::loadbalancer/* Certificate acs:slb:$regionid:$accountid:certificate/$servercertificateId acs:slb:$regionid:$accountid:certificate/* ACL acs:slb:$regionid:$accountid:acl/* acs:slb:$regionid:$accountid:acl/$aclid 其中$regionid/accoutid/servercertificateId 为具体的资源ID,*代表对应的所有资源。 可授权的SLB接口 下表列举了SLB中可授权的API及其描述方式:
API 资源描述 CreateLoadBalancer acs:slb:$regionid:$accountid:loadbalancer/* ModifyLoadBalancerInternetSpec acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DeleteLoadBalancer acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid SetLoadBalancerStatus acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid SetLoadBalancerName acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeLoadBalancers acs:slb:$regionid:$accountid:loadbalancer/* DescribeLoadBalancerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeRegions acs:slb::$accountid: UploadServerCertificate acs:slb:%s:%s:certificate/* DeleteServerCertificate acs:slb:%s:%s:certificate/% DescribeServerCertificate acs:slb:%s:%s:certificate/% SetServerCertificateName acs:slb:%s:%s:certificate/% DescribeServerCertificates acs:slb:%s:%s:certificate/* CreateLoadBalancerHTTPListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid CreateLoadBalancerHTTPSListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:slb:%s:%s:certificate/% CreateLoadBalancerTCPListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid CreateLoadBalancerUDPListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DeleteLoadBalancerListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid StartLoadBalancerListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid StopLoadBalancerListener acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid SetLoadBalancerHTTPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid SetLoadBalancerHTTPSListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:slb:%s:%s:certificate/% SetLoadBalancerTCPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid SetLoadBalancerUDPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeLoadBalancerHTTPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeLoadBalancerHTTPSListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeLoadBalancerTCPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeLoadBalancerUDPListenerAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid AddBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid RemoveBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid SetBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid DescribeHealthStatus acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid CreateVServerGroup acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid SetVServerGroupAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DeleteVServerGroup acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeVServerGroups acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid DescribeVServerGroupAttribute acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid AddVServerGroupBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid RemoveVServerGroupBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid ModifyVServerGroupBackendServers acs:slb:$regionid:$accountid:loadbalancer/$loadbalancerid acs:ecs:$regionid:$accountid:instance/$instanceid CreateAccessControlList acs:slb:$regionid:$accountid:acl/* DeleteAccessControlList acs:slb:$regionid:$accountid:acl/$aclid DescribeAccessControlLists acs:slb:$regionid:$accountid:acl/$aclid DescribeAccessControlListAttribute acs:slb:$regionid:$accountid:acl/$aclid SetAccessControlListAttribute acs:slb:$regionid:$accountid:acl/$aclid AddAccessControlListEntry acs:slb:$regionid:$accountid:acl/$aclid RemoveAccessControlListEntry acs:slb:$regionid:$accountid:acl/$aclid
版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。