Scenario: Restrict updates to only the specified Application Load Balancer instance.
Policy example:

{ 
  "Statement": [ 
    { 
      "Effect": "Allow", 
      "Action": [ 
        "alb:ModifyLoadBalancerAttributes" 
      ], 
      "Resource": [ 
        "trn:alb:cn-beijing:*:loadbalancer/alb-bp******" 
      ] 
    } 
  ] 
}

Interpretation: This policy limits the resource scope of the operation through the TRN expression of the ALB instance. Combined with the operation scope of the Action part, the final restriction can only modify the operation of the ALB instance with the ID alb-bp ******.

For resource granularity permission usage instructions, refer to the Resource usage instructions .