tencent cloud

Application Load Balancer

Authorization Definition

Download
Focus Mode
Font Size
Last updated: 2026-09-28 16:39:10
AI-Translated

Authorizable Resource Types in CAM

Resource Type
API Description
Instance
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
Listener
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
Forwarding rule
qcs::alb:{region}:uin/{uin}:rule/{ruleId}
Target group
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
Security policy
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
Health check
qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId}
Among them:
{region} specifies a specific region (for example, ap-guangzhou). If it is left empty, all regions are supported.
In uin/{uin}, {uin} is the UIN of the root account that owns resources. Alternatively, enter * to indicate all accounts.
{loadBalancerId}, {ruleId}, {listenerId}, {targetGroupId}, {securityPolicyId}, and {templateId} are specific resources. Alternatively, enter * to indicate all resources of that type.

APIs That Can Be Authorized in CAM for ALB

You can authorize the relevant ALB APIs in CAM for the following resource types. The same API may involve multiple resources. The resources are grouped by resource type below, along with the corresponding six-segment format for each resource.

Instance Related

API Operation
Resource Description
API Description
CreateLoadBalancer
Creates an ALB instance.
qcs::alb:{region}:uin/{uin}:loadbalancer/*
qcs::vpc:{region}:uin/{uin}:vpc/{vpcId}
qcs::vpc:{region}:uin/{uin}:subnet/{subnetId}
qcs::vpc:{region}:uin/{uin}:eip/{eipId}
qcs::vpc:{region}:uin/{uin}:bwp/{bandwidthPackageId}
DeleteLoadBalancers
Deletes an ALB instance.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
ModifyLoadBalancerAttributes
Modifies attributes of an ALB instance.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
ModifyLoadBalancerModificationProtection
Modifies deletion protection of an ALB instance.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
SetLoadBalancerSecurityGroups
Configures an ALB security group.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
ModifyLoadBalancerAddressType
Modifies the network type (public/private network) of an ALB instance.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
AssociateBandwidthPackageWithLoadBalancer
Associates a bandwidth package with ALB.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
DisassociateBandwidthPackageFromLoadBalancer
Disassociates a bandwidth package from ALB.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
DescribeLoadBalancerDetail
Queries the ALB instance details.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
DescribeLoadBalancers
Queries the list of ALB instances.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}

Listener Related

API Operation
Resource Description
API Description
CreateListener
Creates a listener.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/*
qcs::certificate:{region}:uin/{uin}:certificate/{certificateId}
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
DeleteListener
Deletes a listener.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
ModifyListenerAttributes
Modifies attributes of a listener.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::certificate:{region}:uin/{uin}:certificate/{certificateId}
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
DescribeListenerDetail
Queries the listener details.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
DescribeListeners
Queries the listener list.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
DescribeListenerHealthStatus
Queries the listener health check status.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
DescribeListenerCertificates
Queries a listener certificate.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
AssociateListenerAdditionalCertificates
Associates a listener additional certificate.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::certificate:{region}:uin/{uin}:certificate/{certificateId}
DisassociateListenerAdditionalCertificates
Disassociates a listener additional certificate.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::certificate:{region}:uin/{uin}:certificate/{certificateId}

Forwarding Rule Related

API Operation
Resource Description
API Description
CreateRules
Creates a forwarding rule.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::alb:{region}:uin/{uin}:rule/*
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
DeleteRules
Deletes a forwarding rule.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::alb:{region}:uin/{uin}:rule/{ruleId}
ModifyRulesAttributes
Modifies attributes of a forwarding rule.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}
qcs::alb:{region}:uin/{uin}:rule/{ruleId}
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
DescribeRules
Queries a forwarding rule.
qcs::alb:{region}:uin/{uin}:loadbalancer/{loadBalancerId}
qcs::alb:{region}:uin/{uin}:listener/{listenerId}

Target Group Related

API Operation
Resource Description
API Description
CreateTargetGroup
Creates a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/*
qcs::vpc:{region}:uin/{uin}:vpc/{vpcId}
DeleteTargetGroups
Deletes a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
ModifyTargetGroupAttributes
Modifies attributes of a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
DescribeTargetGroupTargets
Queries the real server list for a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
DescribeTargetGroups
Queries the target group list.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
AddTargetsToTargetGroup
Adds real servers for a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
qcs::cvm:{region}:uin/{uin}:instance/{instanceId}
qcs::vpc:{region}:uin/{uin}:eni/{eniId}
RemoveTargetsFromTargetGroup
Removes real servers from a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
qcs::cvm:{region}:uin/{uin}:instance/{instanceId}
qcs::vpc:{region}:uin/{uin}:eni/{eniId}
ModifyTargetsInTargetGroup
Modifies real servers for a target group.
qcs::alb:{region}:uin/{uin}:targetgroup/{targetGroupId}
qcs::cvm:{region}:uin/{uin}:instance/{instanceId}
qcs::vpc:{region}:uin/{uin}:eni/{eniId}

Security Policy Related

API Operation
Resource Description
API Description
DeleteSecurityPolicy
Deletes a security policy.
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
ModifySecurityPolicyAttributes
Modifies attributes of a security policy.
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
DescribeSecurityPolicies
Queries the security policy list.
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}
DescribeSecurityPolicyRelations
Queries a security policy association.
qcs::alb:{region}:uin/{uin}:securitypolicy/{securityPolicyId}

Health Check Template Related

API Operation
Resource Description
API Description
CreateHealthCheckTemplate
Creates a health check template.
qcs::alb:{region}:uin/{uin}:healthchecktemplate/*
DeleteHealthCheckTemplates
Deletes a health check template.
qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId}
ModifyHealthCheckTemplate
Modifies a health check template.
qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId}
DescribeHealthCheckTemplates
Queries a health check template.
qcs::alb:{region}:uin/{uin}:healthchecktemplate/{templateId}


Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback