Elastic IP Address
Elastic IP Address
Document
- Documentation
Elastic IP AddressUser GuideIdentity and Access ManagementCustom policy examples for IP Address Pool
Copy page
Download PDFIdentity and Access Management
Custom policy examples for IP Address Pool
Copy pageDownload PDFCustom policy examples for IP Address Pool
If the system default policy cannot meet your needs, you can create a custom policy adhering to the principle of least permission. This enables more granular permission control to enhance secure access for IAM identities to resources under the root account. This topic describes common custom policy examples for IP address pools as reference.
Custom policy examples
tip
Deny takes precedence over Allow. If an entity is denied permissions for certain operations, granting Allow permissions for those operations will not take effect.
Example 1: Deny deleting IP address pool
After authorizing IpAddressPoolFullAccess to an IAM user, you can grant the following permission to deny the deletion of the IP address pool.
{
"Statement": [
{
"Effect": "Deny",
"Action": [
"vpc:DeleteIpAddressPool"
],
"Resource": [
"*"
]
}
]
}
{
"Statement": [
{
"Effect": "Deny",
"Action": [
"vpc:DeleteIpAddressPool"
],
"Resource": [
"trn:vpc:*:2000000001:ippool/ippool-fda83"
]
}
]
}
Example 2: Allow using tag features
{
"Statement":[
{
"Effect":"Allow",
"Action":[
"vpc:TagResources",
"vpc:UntagResources",
"vpc:ListTagsForResources"
],
"Resource":[
"*"
]
}
]
}
Related documents
Appendix
Resource types of IP address pool
TRN formats are shown in the table below:
Last updated: 2026.06.11 10:35:18
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
