tencent cloud

Policy Examples
Download PDF
Last updated: 2024-01-04 14:34:05
Policy Examples
Last updated: 2024-01-04 14:34:05
Download PDF

Full Access Policy for All CLB Instances

Grant a sub-account full access to the CLB service (creating, managing, etc.).
Policy name: CLBResourceFullAccess
{
  "version": "2.0",
  "statement": [{
      "action": [
          "name/clb:*"
      ],
      "resource": "*",
      "effect": "allow"
  }]
}

Read-Only Policy for All CLB Instances

Grant a sub-account read-only access to CLB (i.e., the permission to view but not to create, update, or delete all CLB resources). In the console, the prerequisite to manipulate a resource is the ability to view the resource; therefore, you are recommended to grant the sub-account full read access to CLB.
Policy name: CLBResourceReadOnlyAccess
{
  "version": "2.0",
  "statement": [{
      "action": [
          "name/clb:Describe*"
      ],
      "resource": "*",
      "effect": "allow"
  }]
}

Full Access Policy for CLB Service Under a Specified Tag

Grant a sub-account full access to the CLB service (creating instances, managing listeners, etc.) under a specified tag (tag key: tagkey; tag value: tagvalue).
CLB instances supports configuring tags and using tags for authentication.
{
    "version":"2.0",
    "statement":[
        {
            "effect":"allow",
            "action":"*",
            "resource":"*",
            "condition":{
                "for_any_value:string_equal":{
                    "qcs:tag":[
                        "tagkey&tagvalue"
                    ]
                }
            }
        }
    ]
}

Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback