在使用RAM用户（子账号）调用网络型负载均衡NLB API前，需要阿里云账号（主账号）通过创建授权策略对RAM账号进行授权。在授权策略中，使用资源描述符ARN（Alibaba Cloud Resource Name）指定授权资源。

本文用到的字段含义如下，请在使用时替换为实际值。
  • <regionId>：地域ID。
  • <accountId>：阿里云账号ID。
  • <LoadBalancerId>：NLB实例ID。
  • <ListenerId>：监听ID。
  • <ServerGroupId>：服务器组ID。
  • <SecurityPolicyId>：安全策略TLS ID。

可授权的NLB接口

下表列举了RAM可授权NLB中的操作（Action）和资源（Resource）。

表 1. 实例相关的操作
ActionResource
CreateLoadBalanceracs:nlb:{#regionId}:{#accountId}:loadbalancer/*
DeleteLoadBalanceracs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
UpdateLoadBalancerAttributeacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
UpdateLoadBalancerAddressTypeConfigacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
UpdateLoadBalancerZonesacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
GetLoadBalancerAttributeacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
ListLoadBalancersacs:nlb:{#regionId}:{#accountId}:loadbalancer/*
AttachCommonBandwidthPackageToLoadBalanceracs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
DetachCommonBandwidthPackageFromLoadBalanceracs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
EnableLoadBalancerIpv6Internetacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
DisableLoadBalancerIpv6Internetacs:nlb:{#regionId}:{#accountId}:loadbalancer/{#LoadBalancerId}
表 2. 监听相关的操作
ActionResource
CreateListeneracs:nlb:{#regionId}:{#accountId}:listener/*
DeleteListeneracs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
ListListenersacs:nlb:{#regionId}:{#accountId}:listener/*
UpdateListenerAttributeacs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
StartListeneracs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
StopListeneracs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
GetListenerAttributeacs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
GetListenerHealthStatusacs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
表 3. 服务器组相关的操作
ActionResource
CreateServerGroupacs:nlb:{#regionId}:{#accountId}:servergroup/*
DeleteServerGroupacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
UpdateServerGroupAttributeacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
AddServersToServerGroupacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
RemoveServersFromServerGroupacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
UpdateServerGroupServersAttributeacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
ListServerGroups
  • acs:nlb:{#regionId}:{#accountId}:servergroup/*
  • acs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
ListServerGroupServersacs:nlb:{#regionId}:{#accountId}:servergroup/{#ServerGroupId}
表 4. 安全策略相关的操作
ActionResource
CreateSecurityPolicyacs:nlb:{#regionId}:{#accountId}:securitypolicy/*
UpdateSecurityPolicyAttribute
  • acs:nlb:{#regionId}:{#accountId}:securitypolicy/{#SecurityPolicyId}
  • acs:nlb:{#regionId}:{#accountId}:listener/{#ListenerId}
ListSecurityPolicyacs:nlb:{#regionId}:{#accountId}:securitypolicy/*
DeleteTLSCipherPolicyacs:nlb:{#regionId}:{#accountId}:securitypolicy/{#SecurityPolicyId}
DeleteSecurityPolicyacs:nlb:{#regionId}:{#accountId}:securitypolicy/{#SecurityPolicyId}
表 5. 异步任务相关的操作
ActionResource
GetJobStatusacs:nlb::{#accountId}:*