Scenario: Restrict access to only all operations of the Application Load Balancer.
Policy example:

{ 
  "Statement": [ 
    { 
      "Effect": "Allow", 
      "Action": [ 
        "alb:*" 
      ], 
      "Resource": [ 
        "*" 
      ] 
    } 
  ] 
}

Interpretation: This policy uses wild-card * to summarize all operations within the service alb.

For a detailed description of the policy syntax, refer to the policy basic structure description document .