

# Amazon managed policies for Elastic Load Balancing
<a name="managed-policies"></a>

An Amazon managed policy is a standalone policy that is created and administered by Amazon. Amazon managed policies are designed to provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.

Keep in mind that Amazon managed policies might not grant least-privilege permissions for your specific use cases because they're available for all Amazon customers to use. We recommend that you reduce permissions further by defining [ customer managed policies](https://docs.amazonaws.cn/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#customer-managed-policies) that are specific to your use cases.

You cannot change the permissions defined in Amazon managed policies. If Amazon updates the permissions defined in an Amazon managed policy, the update affects all principal identities (users, groups, and roles) that the policy is attached to. Amazon is most likely to update an Amazon managed policy when a new Amazon Web Services service is launched or new API operations become available for existing services.

For more information, see [Amazon managed policies](https://docs.amazonaws.cn/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies) in the *IAM User Guide*.

## Amazon managed policy: AWSElasticLoadBalancingClassicServiceRolePolicy
<a name="AWSElasticLoadBalancingClassicServiceRolePolicy"></a>

This policy includes all the permissions that Elastic Load Balancing (Classic Load Balancer) requires to call other Amazon services on your behalf. Service-linked roles are predefined. With predefined roles you don't have to manually add the necessary permissions for Elastic Load Balancing to complete actions on your behalf. You cannot attach, detach, modify, or delete this policy. 

To view the permissions for this policy, see [https://docs.amazonaws.cn/aws-managed-policy/latest/reference/AWSElasticLoadBalancingClassicServiceRolePolicy.html](https://docs.amazonaws.cn/aws-managed-policy/latest/reference/AWSElasticLoadBalancingClassicServiceRolePolicy.html) in the *Amazon Managed Policy Reference*.

## Amazon managed policy: AWSElasticLoadBalancingServiceRolePolicy
<a name="AWSElasticLoadBalancingServiceRolePolicy"></a>

This policy includes all the permissions that Elastic Load Balancing requires to call other Amazon services on your behalf. Service-linked roles are predefined. With predefined roles you don't have to manually add the necessary permissions for Elastic Load Balancing to complete actions on your behalf. You cannot attach, detach, modify, or delete this policy. 

To view the permissions for this policy, see [https://docs.amazonaws.cn/aws-managed-policy/latest/reference/AWSElasticLoadBalancingServiceRolePolicy.html](https://docs.amazonaws.cn/aws-managed-policy/latest/reference/AWSElasticLoadBalancingServiceRolePolicy.html) in the *Amazon Managed Policy Reference*.

## Amazon managed policy: ElasticLoadBalancingFullAccess
<a name="ElasticLoadBalancingFullAccess"></a>

This policy gives full access to the Elastic Load Balancing service and limited access to other services via the Amazon Management Console.

To view the permissions for this policy, see [https://docs.amazonaws.cn/aws-managed-policy/latest/reference/ElasticLoadBalancingFullAccess.html](https://docs.amazonaws.cn/aws-managed-policy/latest/reference/ElasticLoadBalancingFullAccess.html) in the *Amazon Managed Policy Reference*.

## Amazon managed policy: ElasticLoadBalancingReadOnly
<a name="ElasticLoadBalancingReadOnly"></a>

This policy provides read-only access to Elastic Load Balancing and dependent services.

To view the permissions for this policy, see [https://docs.amazonaws.cn/aws-managed-policy/latest/reference/ElasticLoadBalancingReadOnly.html](https://docs.amazonaws.cn/aws-managed-policy/latest/reference/ElasticLoadBalancingReadOnly.html) in the *Amazon Managed Policy Reference*.

## Elastic Load Balancing updates to Amazon managed policies
<a name="policy-updates"></a>

View details about updates to Amazon managed policies for Elastic Load Balancing since this service began tracking these changes.


| Change | Description | Date | 
| --- | --- | --- | 
| [ElasticLoadBalancingFullAccess](#ElasticLoadBalancingFullAccess) - Update to an existing policy | Added the `ec2:DescribeAvailityZones` action to grant permissions to describe Availability Zones during input validation. | February 23, 2026 | 
| [AWSElasticLoadBalancingServiceRolePolicy](#AWSElasticLoadBalancingServiceRolePolicy) - Update to an existing policy | Added the `ec2:DescribeAvailityZones` action to grant permissions to describe Availability Zones during input validation. | November 21, 2025 | 
| [AWSElasticLoadBalancingServiceRolePolicy](#AWSElasticLoadBalancingServiceRolePolicy) - Update to an existing policy | Added the `ec2:AllocateIpamPoolCidr` action to grant permissions to allocate CIDR blocks from IPAM pools. | February 17, 2025 | 
| [ElasticLoadBalancingFullAccess](#ElasticLoadBalancingFullAccess) - Update to an existing policy | Added the `arc-zonal-shift:*` actions to grant permissions required for zonal shift. | November 28, 2023 | 
| [ElasticLoadBalancingReadOnly](#ElasticLoadBalancingReadOnly) - Update to an existing policy | Added the following actions to grant permissions required for zonal shift: `arc-zonal-shift:GetManagedResource`, `arc-zonal-shift:ListManagedResources` and `arc-zonal-shift:ListZonalShifts`. | November 28, 2023 | 
| [AWSElasticLoadBalancingServiceRolePolicy](#AWSElasticLoadBalancingServiceRolePolicy) - Update to an existing policy | Added the `ec2:DescribeVpcPeeringConnections` action to grant permissions required for peering connections. | October 11, 2021 | 
| [ElasticLoadBalancingFullAccess](#ElasticLoadBalancingFullAccess) - Update to an existing policy | Added the `ec2:DescribeVpcPeeringConnections` action to grant permissions required for peering connections. | October 11, 2021 | 
| [ElasticLoadBalancingFullAccess](#ElasticLoadBalancingFullAccess) - New policy | Provides full access to Elastic Load Balancing and dependent services. | September 20, 2018 | 
| [ElasticLoadBalancingReadOnly](#ElasticLoadBalancingReadOnly) - New policy | Provides read-only access to Elastic Load Balancing and dependent services. | September 20, 2018 | 
| Elastic Load Balancing started tracking changes | Elastic Load Balancing started tracking changes for its Amazon managed policies. | September 20, 2018 | 