Full Read-Write Policy of CLB
Grant a sub-account full management permission (including creation and management) for the CLB service.
Policy Name: CLB ResourceFullAccess
{ "version": "2.0", "statement": [{ "action": [ "name/clb:*" ], "resource": "*", "effect": "allow" }] }
Read-Only Policy of CLB
Grant a sub-account read-only access to the CLB (that is, the ability to view all resources under all CLBs), but the sub-account cannot create, update, or delete them. In the console, the premise of operating a resource is that it can be viewed, so it is recommended you open CLB full read permissions for sub-accounts.
Policy Name: CLB ResourceReadOnlyAccess
{ "version": "2.0", "statement": [{ "action": [ "name/clb:Describe*" ], "resource": "*", "effect": "allow" }] }