Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Preferences
Contact Us
Feedback
AWS Documentation
Create an AWS Account

Elastic Load Balancing API permissions

PDF
Focus mode
Elastic Load Balancing API permissions - Elastic Load Balancing
Required permissions for the 2015-12-01 APIRequired permissions for the 2012-06-01 API

You must grant users permission to call the Elastic Load Balancing API actions they need. In addition, for some Elastic Load Balancing actions, you must grant users permission to call specific actions from the Amazon EC2 API.

Required permissions for the 2015-12-01 API

When calling the following actions from the 2015-12-01 API, you must grant users permission to call the specified actions.

CreateLoadBalancer

  • elasticloadbalancing:CreateLoadBalancer

  • ec2:DescribeAccountAttributes

  • ec2:DescribeAddresses

  • ec2:DescribeInternetGateways

  • ec2:DescribeSecurityGroups

  • ec2:DescribeSubnets

  • ec2:DescribeVpcs

  • ec2:GetSecurityGroupsForVpc

  • iam:CreateServiceLinkedRole

CreateTargetGroup

  • elasticloadbalancing:CreateTargetGroup

  • ec2:DescribeInternetGateways

  • ec2:DescribeVpcs

  • iam:CreateServiceLinkedRole

RegisterTargets

  • elasticloadbalancing:RegisterTargets

  • ec2:DescribeInstances

  • ec2:DescribeInternetGateways

  • ec2:DescribeSubnets

  • ec2:DescribeVpcs

SetIpAddressType

  • elasticloadbalancing:SetIpAddressType

  • ec2:DescribeSubnets

SetSubnets

  • elasticloadbalancing:SetSubnets

  • ec2:DescribeSubnets

Required permissions for the 2012-06-01 API

When calling the following actions from the 2012-06-01 API, you must grant users permission to call the specified actions.

ApplySecurityGroupsToLoadBalancer

  • elasticloadbalancing:ApplySecurityGroupsToLoadBalancer

  • ec2:DescribeAccountAttributes

  • ec2:DescribeSecurityGroups

AttachLoadBalancerToSubnets

  • elasticloadbalancing:AttachLoadBalancerToSubnets

  • ec2:DescribeSubnets

CreateLoadBalancer

  • elasticloadbalancing:CreateLoadBalancer

  • ec2:CreateSecurityGroup

  • ec2:DescribeAccountAttributes

  • ec2:DescribeInternetGateways

  • ec2:DescribeSecurityGroups

  • ec2:DescribeSubnets

  • ec2:DescribeVpcs

  • iam:CreateServiceLinkedRole

DeregisterInstancesFromLoadBalancer

  • elasticloadbalancing:DeregisterInstancesFromLoadBalancer

  • ec2:DescribeClassicLinkInstances

  • ec2:DescribeInstances

DescribeInstanceHealth

  • elasticloadbalancing:DescribeInstanceHealth

  • ec2:DescribeClassicLinkInstances

  • ec2:DescribeInstances

DescribeLoadBalancers

  • elasticloadbalancing:DescribeLoadBalancers

  • ec2:DescribeSecurityGroups

DisableAvailabilityZonesForLoadBalancer

  • elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer

  • ec2:DescribeAccountAttributes

  • ec2:DescribeInternetGateways

  • ec2:DescribeVpcs

EnableAvailabilityZonesForLoadBalancer

  • elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer

  • ec2:DescribeAccountAttributes

  • ec2:DescribeInternetGateways

  • ec2:DescribeSubnets

  • ec2:DescribeVpcs

RegisterInstancesWithLoadBalancer

  • elasticloadbalancing:RegisterInstancesWithLoadBalancer

  • ec2:DescribeAccountAttributes

  • ec2:DescribeClassicLinkInstances

  • ec2:DescribeInstances

  • ec2:DescribeVpcClassicLink

On this page

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.