Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Elastic Load Balancing V2

Amazon Elastic Load Balancing V2 (service prefix: elasticloadbalancing) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Elastic Load Balancing V2
Actions defined by Amazon Elastic Load Balancing V2
Permission-only actions for Amazon Elastic Load Balancing V2
Resource types defined by Amazon Elastic Load Balancing V2
Condition keys for Amazon Elastic Load Balancing V2

API operations defined by Amazon Elastic Load Balancing V2

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
AddListenerCertificates	elasticloadbalancing:AddListenerCertificates	Write
AddTags	elasticloadbalancing:AddTags	Tagging, Write
AddTrustStoreRevocations	elasticloadbalancing:AddTrustStoreRevocations	Write
CreateListener	elasticloadbalancing:AddTags	Tagging, Write
CreateListener	elasticloadbalancing:CreateListener	Write
CreateLoadBalancer	elasticloadbalancing:AddTags	Tagging, Write
CreateLoadBalancer	elasticloadbalancing:CreateLoadBalancer	Write
CreateRule	elasticloadbalancing:AddTags	Tagging, Write
CreateRule	elasticloadbalancing:CreateRule	Write
CreateTargetGroup	elasticloadbalancing:AddTags	Tagging, Write
CreateTargetGroup	elasticloadbalancing:CreateTargetGroup	Write
CreateTrustStore	elasticloadbalancing:AddTags	Tagging, Write
CreateTrustStore	elasticloadbalancing:CreateTrustStore	Write
DeleteListener	elasticloadbalancing:DeleteListener	Write
DeleteLoadBalancer	elasticloadbalancing:DeleteLoadBalancer	Write
DeleteRule	elasticloadbalancing:DeleteRule	Write
DeleteSharedTrustStoreAssociation	elasticloadbalancing:DeleteSharedTrustStoreAssociation	Write
DeleteTargetGroup	elasticloadbalancing:DeleteTargetGroup	Write
DeleteTrustStore	elasticloadbalancing:DeleteTrustStore	Write
DeregisterTargets	elasticloadbalancing:DeregisterTargets	Write
DescribeAccountLimits	elasticloadbalancing:DescribeAccountLimits	Read
DescribeCapacityReservation	elasticloadbalancing:DescribeCapacityReservation	Read
DescribeListenerAttributes	elasticloadbalancing:DescribeListenerAttributes	Read
DescribeListenerCertificates	elasticloadbalancing:DescribeListenerCertificates	Read
DescribeListeners	elasticloadbalancing:DescribeListeners	Read
DescribeLoadBalancerAttributes	elasticloadbalancing:DescribeLoadBalancerAttributes	Read
DescribeLoadBalancers	elasticloadbalancing:DescribeLoadBalancers	List
DescribeRules	elasticloadbalancing:DescribeRules	Read
DescribeSSLPolicies	elasticloadbalancing:DescribeSSLPolicies	Read
DescribeTags	elasticloadbalancing:DescribeTags	Read
DescribeTargetGroupAttributes	elasticloadbalancing:DescribeTargetGroupAttributes	Read
DescribeTargetGroups	elasticloadbalancing:DescribeTargetGroups	Read
DescribeTargetHealth	elasticloadbalancing:DescribeTargetHealth	Read
DescribeTrustStoreAssociations	elasticloadbalancing:DescribeTrustStoreAssociations	Read
DescribeTrustStoreRevocations	elasticloadbalancing:DescribeTrustStoreRevocations	Read
DescribeTrustStores	elasticloadbalancing:DescribeTrustStores	Read
GetResourcePolicy	elasticloadbalancing:GetResourcePolicy	Read
GetTrustStoreCaCertificatesBundle	elasticloadbalancing:GetTrustStoreCaCertificatesBundle	Read
GetTrustStoreRevocationContent	elasticloadbalancing:GetTrustStoreRevocationContent	Read
ModifyCapacityReservation	elasticloadbalancing:ModifyCapacityReservation	Write
ModifyIpPools	elasticloadbalancing:ModifyIpPools	Write
ModifyListener	elasticloadbalancing:ModifyListener	Write
ModifyListenerAttributes	elasticloadbalancing:ModifyListenerAttributes	Write
ModifyLoadBalancerAttributes	elasticloadbalancing:ModifyLoadBalancerAttributes	Write
ModifyRule	elasticloadbalancing:ModifyRule	Write
ModifyTargetGroup	elasticloadbalancing:ModifyTargetGroup	Write
ModifyTargetGroupAttributes	elasticloadbalancing:ModifyTargetGroupAttributes	Write
ModifyTrustStore	elasticloadbalancing:ModifyTrustStore	Write
RegisterTargets	elasticloadbalancing:RegisterTargets	Write
RemoveListenerCertificates	elasticloadbalancing:RemoveListenerCertificates	Write
RemoveTags	elasticloadbalancing:RemoveTags	Tagging, Write
RemoveTrustStoreRevocations	elasticloadbalancing:RemoveTrustStoreRevocations	Write
SetIpAddressType	elasticloadbalancing:SetIpAddressType	Write
SetRulePriorities	elasticloadbalancing:SetRulePriorities	Write
SetSecurityGroups	elasticloadbalancing:SetSecurityGroups	Write
SetSubnets	elasticloadbalancing:SetSubnets	Write

Actions defined by Amazon Elastic Load Balancing V2

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AddListenerCertificates	Grants permission to add the specified certificates to the specified secure listener	listener/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
AddListenerCertificates		listener/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
AddTags	Grants permission to add the specified tags to the specified load balancer. Each load balancer can have a maximum of 10 tags	listener-rule/app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}	Tagging, Write
		listener-rule/net	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		listener/app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		listener/gwy	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		listener/net	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/app/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/gwy/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		targetgroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
		truststore	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:CreateAction elasticloadbalancing:ResourceTag/${TagKey}
AddTrustStoreRevocations	Grants permission to add revocations to a trust store	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
CreateListener	Grants permission to create a listener for the specified Application Load Balancer	loadbalancer/app/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy	Write
		loadbalancer/gwy/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy
		loadbalancer/net/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy
CreateLoadBalancer	Grants permission to create a load balancer	loadbalancer/app/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Scheme elasticloadbalancing:SecurityGroup elasticloadbalancing:Subnet	Write
		loadbalancer/gwy/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Scheme elasticloadbalancing:SecurityGroup elasticloadbalancing:Subnet
		loadbalancer/net/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Scheme elasticloadbalancing:SecurityGroup elasticloadbalancing:Subnet
CreateRule	Grants permission to create a rule for the specified listener	listener/app*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}	Write
CreateRule		listener/net*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}	Write
CreateTargetGroup	Grants permission to create a target group	targetgroup*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}	Write
CreateTrustStore	Grants permission to create a trust store	truststore	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteListener	Grants permission to delete the specified listener	listener/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		listener/gwy*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		listener/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
DeleteLoadBalancer	Grants permission to delete the specified load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		loadbalancer/gwy/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
DeleteRule	Grants permission to delete the specified rule	listener-rule/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteRule	Grants permission to delete the specified rule	listener-rule/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteSharedTrustStoreAssociation	Grants permission to delete the specified shared trust store association	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteTargetGroup	Grants permission to delete the specified target group	targetgroup*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteTrustStore	Grants permission to delete the specified trust store	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeregisterTargets	Grants permission to deregister the specified targets from the specified target group	targetgroup*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DescribeAccountLimits	Grants permission to describe the Elastic Load Balancing resource limits for the Amazon Web Services account			Read
DescribeCapacityReservation	Grants permission to describe the capacity reservation for a load balancer			Read
DescribeListenerAttributes	Grants permission to describe the attributes for the specified listener			Read
DescribeListenerCertificates	Grants permission to describe the certificates for the specified secure listener			Read
DescribeListeners	Grants permission to describe the specified listeners or the listeners for the specified Application Load Balancer			Read
DescribeLoadBalancerAttributes	Grants permission to describe the attributes for the specified load balancer			Read
DescribeLoadBalancers	Grants permission to describe the specified the load balancers. If no load balancers are specified, the call describes all of your load balancers			List
DescribeRules	Grants permission to describe the specified rules or the rules for the specified listener			Read
DescribeSSLPolicies	Grants permission to describe the specified policies or all policies used for SSL negotiation			Read
DescribeTags	Grants permission to describe the tags associated with the specified resource			Read
DescribeTargetGroupAttributes	Grants permission to describe the attributes for the specified target group			Read
DescribeTargetGroups	Grants permission to describe the specified target groups or all of your target groups			Read
DescribeTargetHealth	Grants permission to describe the health of the specified targets or all of your targets			Read
DescribeTrustStoreAssociations	Grants permission to describe the associations with a trust store			Read
DescribeTrustStoreRevocations	Grants permission to describe the specified trust stores revocations or all of your revocations related to a trust store			Read
DescribeTrustStores	Grants permission to describe the specified trust stores or all of your trust stores			Read
GetResourcePolicy	Grants permission to retrieve the resource policy associated with the resource	truststore	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Read
GetTrustStoreCaCertificatesBundle	Grants permission to retrieve a trust store CA certificates bundle	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Read
GetTrustStoreRevocationContent	Grants permission to retrieve a trust store revocation content	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Read
ModifyCapacityReservation	Grants permission to modify the capacity reservation for a load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		loadbalancer/gwy/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
ModifyIpPools	Grants permission to modify the ip pools for a load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
ModifyListener	Grants permission to modify the specified properties of the specified listener	listener/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy	Write
		listener/gwy*	aws:ResourceTag/${TagKey} elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy
		listener/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ListenerProtocol elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityPolicy
ModifyListenerAttributes	Grants permission to modify the attributes of the specified listener	listener/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		listener/gwy*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		listener/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
ModifyLoadBalancerAttributes	Grants permission to modify the attributes of the specified load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		loadbalancer/gwy/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
ModifyRule	Grants permission to modify the specified rule	listener-rule/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
ModifyRule	Grants permission to modify the specified rule	listener-rule/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
ModifyTargetGroup	Grants permission to modify the health checks used when evaluating the health state of the targets in the specified target group	targetgroup*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
ModifyTargetGroupAttributes	Grants permission to modify the specified attributes of the specified target group	targetgroup*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
ModifyTrustStore	Grants permission to modify the specified trust store	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
RegisterTargets	Grants permission to register the specified targets with the specified target group	targetgroup*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
RemoveListenerCertificates	Grants permission to remove the specified certificates of the specified secure listener	listener/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
RemoveListenerCertificates		listener/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
RemoveTags	Grants permission to remove one or more tags from the specified load balancer	listener-rule/app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}	Tagging, Write
		listener-rule/net	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		listener/app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		listener/gwy	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		listener/net	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/app/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/gwy/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		targetgroup	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
		truststore	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys elasticloadbalancing:ResourceTag/${TagKey}
RemoveTrustStoreRevocations	Grants permission to remove revocations from a trust store	truststore*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
SetIpAddressType	Grants permission to set the type of IP addresses used by the subnets of the specified load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
		loadbalancer/gwy/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
SetRulePriorities	Grants permission to set the priorities of the specified rules	listener-rule/app*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
SetRulePriorities		listener-rule/net*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
SetSecurityGroups	Grants permission to associate the specified security groups with the specified load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityGroup	Write
SetSecurityGroups		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:SecurityGroup	Write
SetSubnets	Grants permission to enable the Availability Zone for the specified subnets for the specified load balancer	loadbalancer/app/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Subnet	Write
		loadbalancer/gwy/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Subnet
		loadbalancer/net/	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey} elasticloadbalancing:Subnet

Permission-only actions for Amazon Elastic Load Balancing V2

The following actions are defined by Amazon Elastic Load Balancing V2 but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AllowVendedLogDeliveryForResource	Grants permission to configure vended log delivery for load balancers			Permissions management, Write
CreateWebACLAssociation	Grants permission to associate WAF WebACL to the specified load balancer	loadbalancer/app/*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DeleteWebACLAssociation	Grants permission to disassociate WAF WebACL from the specified load balancer	loadbalancer/app/*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Write
DescribeWebACLAssociation	Grants permission to describe all load balancers associated to a WAF WebACL in your account			List
GetLoadBalancerWebACL	Grants permission to retrieve the WAF WebACL associated to the specified load balancer	loadbalancer/app/*	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}	Read
SetWebAcl	Grants permission to give WebAcl permission to WAF			Write

Resource types defined by Amazon Elastic Load Balancing V2

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
listener-rule/app	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
listener-rule/net	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
listener/app	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
listener/gwy	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
listener/net	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
loadbalancer/app/	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
loadbalancer/gwy/	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/${LoadBalancerName}/${LoadBalancerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
loadbalancer/net/	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/${LoadBalancerName}/${LoadBalancerId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
targetgroup	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/${TargetGroupName}/${TargetGroupId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}
truststore	arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/${TrustStoreName}/${TrustStoreId}	aws:ResourceTag/${TagKey} elasticloadbalancing:ResourceTag/${TagKey}

Condition keys for Amazon Elastic Load Balancing V2

Amazon Elastic Load Balancing V2 defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a tag key and value pair that is allowed in the request	String
aws:ResourceTag/${TagKey}	Filters access by a tag key and value pair of a resource	String
aws:TagKeys	Filters access by a list of tag keys that are allowed in the request	ArrayOfString
elasticloadbalancing:CreateAction	Filters access by the name of a resource-creating API action	String
elasticloadbalancing:ListenerProtocol	Filters access by the listener protocol that is allowed in the request	ArrayOfString
elasticloadbalancing:ResourceTag/${TagKey}	Filters access by the preface string for a tag key and value pair that are attached to a resource	String
elasticloadbalancing:Scheme	Filters access by the load balancer scheme that is allowed in the request	String
elasticloadbalancing:SecurityGroup	Filters access by the security-group IDs that are allowed in the request	ArrayOfString
elasticloadbalancing:SecurityPolicy	Filters access by the SSL Security Policies that are allowed in the request	ArrayOfString
elasticloadbalancing:Subnet	Filters access by the subnet IDs that are allowed in the request	ArrayOfString

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Elastic Load Balancing (elasticloadbalancing)

Amazon Elemental MediaConvert (mediaconvert)