AWS Elastic Load Balancing (elasticloadbalancing)

2026-07-15

49 new actions, 10 new resources | 3 updated actions, 1 updated condition

Additions

    Actions
  • AddListenerCertificates
    • Description:  Grants permission to add the specified certificates to the specified secure listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • AddTrustStoreRevocations
    • Description:  Grants permission to add revocations to a trust store
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • AllowVendedLogDeliveryForResource
    • Description:  Grants permission to configure vended log delivery for load balancers
    • Access:  Permissions management
  • CreateListener
    • Description:  Grants permission to create a listener for the specified Application Load Balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

      Name: loadbalancer/gwy/

      Required: No

      Name: loadbalancer/net/

      Required: No

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      elasticloadbalancing:ListenerProtocol

      elasticloadbalancing:ResourceTag/${TagKey}

      elasticloadbalancing:SecurityPolicy
  • CreateRule
    • Description:  Grants permission to create a rule for the specified listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      elasticloadbalancing:ResourceTag/${TagKey}
  • CreateTargetGroup
    • Description:  Grants permission to create a target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      elasticloadbalancing:ResourceTag/${TagKey}
  • CreateTrustStore
    • Description:  Grants permission to create a trust store
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: No

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      elasticloadbalancing:ResourceTag/${TagKey}
  • CreateWebACLAssociation
    • Description:  Grants permission to associate WAF WebACL to the specified load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteListener
    • Description:  Grants permission to delete the specified listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/gwy

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteRule
    • Description:  Grants permission to delete the specified rule
    • Access:  Write
    • Resources: 

      Name: listener-rule/app

      Required: Yes

      Name: listener-rule/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteSharedTrustStoreAssociation
    • Description:  Grants permission to delete the specified shared trust store association
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteTargetGroup
    • Description:  Grants permission to delete the specified target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteTrustStore
    • Description:  Grants permission to delete the specified trust store
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeleteWebACLAssociation
    • Description:  Grants permission to disassociate WAF WebACL from the specified load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DeregisterTargets
    • Description:  Grants permission to deregister the specified targets from the specified target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • DescribeAccountLimits
    • Description:  Grants permission to describe the Elastic Load Balancing resource limits for the AWS account
    • Access:  Read
  • DescribeCapacityReservation
    • Description:  Grants permission to describe the capacity reservation for a load balancer
    • Access:  Read
  • DescribeListenerAttributes
    • Description:  Grants permission to describe the attributes for the specified listener
    • Access:  Read
  • DescribeListenerCertificates
    • Description:  Grants permission to describe the certificates for the specified secure listener
    • Access:  Read
  • DescribeListeners
    • Description:  Grants permission to describe the specified listeners or the listeners for the specified Application Load Balancer
    • Access:  Read
  • DescribeRules
    • Description:  Grants permission to describe the specified rules or the rules for the specified listener
    • Access:  Read
  • DescribeSSLPolicies
    • Description:  Grants permission to describe the specified policies or all policies used for SSL negotiation
    • Access:  Read
  • DescribeTargetGroupAttributes
    • Description:  Grants permission to describe the attributes for the specified target group
    • Access:  Read
  • DescribeTargetGroups
    • Description:  Grants permission to describe the specified target groups or all of your target groups
    • Access:  Read
  • DescribeTargetHealth
    • Description:  Grants permission to describe the health of the specified targets or all of your targets
    • Access:  Read
  • DescribeTrustStoreAssociations
    • Description:  Grants permission to describe the associations with a trust store
    • Access:  Read
  • DescribeTrustStoreRevocations
    • Description:  Grants permission to describe the specified trust stores revocations or all of your revocations related to a trust store
    • Access:  Read
  • DescribeTrustStores
    • Description:  Grants permission to describe the specified trust stores or all of your trust stores
    • Access:  Read
  • DescribeWebACLAssociation
    • Description:  Grants permission to describe all load balancers associated to a WAF WebACL in your account
    • Access:  List
  • GetLoadBalancerWebACL
    • Description:  Grants permission to retrieve the WAF WebACL associated to the specified load balancer
    • Access:  Read
    • Resources: 

      Name: loadbalancer/app/

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • GetResourcePolicy
    • Description:  Grants permission to retrieve the resource policy associated with the resource
    • Access:  Read
    • Resources: 

      Name: truststore

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • GetTrustStoreCaCertificatesBundle
    • Description:  Grants permission to retrieve a trust store CA certificates bundle
    • Access:  Read
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • GetTrustStoreRevocationContent
    • Description:  Grants permission to retrieve a trust store revocation content
    • Access:  Read
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyCapacityReservation
    • Description:  Grants permission to modify the capacity reservation for a load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

      Name: loadbalancer/gwy/

      Required: No

      Name: loadbalancer/net/

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyIpPools
    • Description:  Grants permission to modify the ip pools for a load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyListener
    • Description:  Grants permission to modify the specified properties of the specified listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/gwy

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ListenerProtocol

      elasticloadbalancing:ResourceTag/${TagKey}

      elasticloadbalancing:SecurityPolicy
  • ModifyListenerAttributes
    • Description:  Grants permission to modify the attributes of the specified listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/gwy

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyRule
    • Description:  Grants permission to modify the specified rule
    • Access:  Write
    • Resources: 

      Name: listener-rule/app

      Required: Yes

      Name: listener-rule/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyTargetGroup
    • Description:  Grants permission to modify the health checks used when evaluating the health state of the targets in the specified target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyTargetGroupAttributes
    • Description:  Grants permission to modify the specified attributes of the specified target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • ModifyTrustStore
    • Description:  Grants permission to modify the specified trust store
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • RegisterTargets
    • Description:  Grants permission to register the specified targets with the specified target group
    • Access:  Write
    • Resources: 

      Name: targetgroup

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • RemoveListenerCertificates
    • Description:  Grants permission to remove the specified certificates of the specified secure listener
    • Access:  Write
    • Resources: 

      Name: listener/app

      Required: Yes

      Name: listener/net

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • RemoveTrustStoreRevocations
    • Description:  Grants permission to remove revocations from a trust store
    • Access:  Write
    • Resources: 

      Name: truststore

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • SetIpAddressType
    • Description:  Grants permission to set the type of IP addresses used by the subnets of the specified load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

      Name: loadbalancer/gwy/

      Required: No

      Name: loadbalancer/net/

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • SetRulePriorities
    • Description:  Grants permission to set the priorities of the specified rules
    • Access:  Write
    • Resources: 

      Name: listener-rule/app

      Required: Yes

      Name: listener-rule/net

      Required: Yes

  • SetSecurityGroups
    • Description:  Grants permission to associate the specified security groups with the specified load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

      Name: loadbalancer/net/

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}

      elasticloadbalancing:SecurityGroup
  • SetSubnets
    • Description:  Grants permission to enable the Availability Zone for the specified subnets for the specified load balancer
    • Access:  Write
    • Resources: 

      Name: loadbalancer/app/

      Required: No

      Name: loadbalancer/gwy/

      Required: No

      Name: loadbalancer/net/

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}

      elasticloadbalancing:Subnet
  • SetWebAcl
    • Description:  Grants permission to give WebAcl permission to WAF
    • Access:  Write
    Resources
  • listener-rule/app
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • listener-rule/net
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • listener/app
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • listener/gwy
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • listener/net
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • loadbalancer/app/
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • loadbalancer/gwy/
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/${LoadBalancerName}/${LoadBalancerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • loadbalancer/net/
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/${LoadBalancerName}/${LoadBalancerId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • targetgroup
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/${TargetGroupName}/${TargetGroupId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}
  • truststore
    • Arn:  arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/${TrustStoreName}/${TrustStoreId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

      elasticloadbalancing:ResourceTag/${TagKey}

Updates

    Actions
  • ApplySecurityGroupsToLoadBalancer
      Resources
    • ＋ listener-rule/app
    • ＋ listener-rule/net
    • ＋ listener/app
    • ＋ listener/gwy
    • ＋ listener/net
    • ＋ loadbalancer/app/
    • ＋ loadbalancer/gwy/
    • ＋ loadbalancer/net/
    • ＋ targetgroup
    • ＋ truststore
  • DeleteLoadBalancerListeners
      Resources
    • ＋ loadbalancer/app/
    • ＋ loadbalancer/gwy/
    • ＋ loadbalancer/net/
  • DescribeTags
      Resources
    • ＋ loadbalancer/app/
    • ＋ loadbalancer/gwy/
    • ＋ loadbalancer/net/