Use AWS Resource Access Manager to share AWS resources between AWS accounts. To share a resource, you create a resource share, associate the resource with the resource share, and specify the principals that can access the resource. The following principals are supported:
The ID of an AWS account
The Amazon Resource Name (ARN) of an OU from AWS Organizations
The Amazon Resource Name (ARN) of an organization from AWS Organizations
If you specify an AWS account that doesn't exist in the same organization as the account that owns the resource share, the owner of the specified account receives an invitation to accept the resource share. After the owner accepts the invitation, they can access the resources in the resource share. An administrator of the specified account can use IAM policies to restrict access resources in the resource share.
ram()
accept_resource_share_invitation | Accepts an invitation to a resource share from another AWS account |
associate_resource_share | Associates the specified resource share with the specified principals and resources |
create_resource_share | Creates a resource share |
delete_resource_share | Deletes the specified resource share |
disassociate_resource_share | Disassociates the specified principals or resources from the specified resource share |
enable_sharing_with_aws_organization | Enables resource sharing within your organization |
get_resource_policies | Gets the policies for the specifies resources |
get_resource_share_associations | Gets the associations for the specified resource share |
get_resource_share_invitations | Gets the specified invitations for resource sharing |
get_resource_shares | Gets the specified resource shares or all of your resource shares |
list_principals | Lists the principals with access to the specified resource |
list_resources | Lists the resources that the specified principal can access |
reject_resource_share_invitation | Rejects an invitation to a resource share from another AWS account |
tag_resource | Adds the specified tags to the specified resource share |
untag_resource | Removes the specified tags from the specified resource share |
# NOT RUN {
svc <- ram()
svc$accept_resource_share_invitation(
Foo = 123
)
# }
# NOT RUN {
# }
Run the code above in your browser using DataLab