Using shared Amazon resources - Amazon Resource Access Manager
Respond to the resource share invitationUse the resources that are shared with you
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Using shared Amazon resources

To start using resources that were shared with your account using Amazon Resource Access Manager, complete the following tasks.

Respond to the resource share invitation

If you receive an invitation to join a resource share, you must accept it to gain access to the shared resources.

Invitations aren't used in the following scenarios:

  • If you're part of an organization in Amazon Organizations and sharing in your organization is enabled, then principals in the organization automatically get access to the shared resources without invitations.

  • If you share with the Amazon Web Services account that owns the resource, then the principals in that account automatically get access to the shared resources without invitations.

Console
To respond to invitations

  1. Open the Shared with me : Resource shares page in the Amazon RAM console.

    Note

    A resource share is visible in only the Amazon Web Services Region in which it was created. If an expected resource share doesn't appear in the console, you might need to switch to a different Amazon Web Services Region using the drop-down control in the upper-right corner.

  2. Review the list of resource shares to which you have been granted access.

    The Status column indicates your current participation status for the resource share. The Pending status indicates that you have been added to a resource share, but you have not yet accepted or rejected the invitation.

  3. To respond to the resource share invitation, select the resource share ID and choose Accept resource share to accept the invitation, or Reject resource share to decline the invitation. If you reject the invitation, you don't get access to the resources. If you accept the invitation, you gain access to the resources.

Amazon CLI

To start, get a list of the resource share invitations that are available to you. The following example command was run in the cn-northwest-1 Region, and shows one resource share is available in the PENDING state.

$ aws ram get-resource-share-invitations
{
    "resourceShareInvitations": [
        {
            "resourceShareInvitationArn": "arn:aws-cn:ram:cn-northwest-1:111122223333:resource-share-invitation/1234abcd-ef12-9876-5432-aaaaaa111111",
            "resourceShareName": "MyNewResourceShare",
            "resourceShareArn": "arn:aws-cn:ram:cn-northwest-1:111122223333:resource-share/1234abcd-ef12-9876-5432-bbbbbb222222",
            "senderAccountId": "111122223333",
            "receiverAccountId": "444455556666",
            "invitationTimestamp": "2021-09-15T15:00:32.568000-07:00",
            "status": "PENDING"
        }
    ]
}

You can use the Amazon Resource Name (ARN) of the invitation from the previous command as a parameter in the next command to accept that invitation.

$ aws ram accept-resource-share-invitation \
    --resource-share-invitation-arn arn:aws-cn:ram:cn-northwest-1:111122223333:resource-share-invitation/1234abcd-ef12-9876-5432-aaaaaa111111
{
    "resourceShareInvitation": {
        "resourceShareInvitationArn": "arn:aws-cn:ram:cn-northwest-1:111122223333:resource-share-invitation/1234abcd-ef12-9876-5432-aaaaaa111111",
        "resourceShareName": "MyNewResourceShare",
        "resourceShareArn": "arn:aws-cn:ram:cn-northwest-1:111122223333:resource-share/1234abcd-ef12-9876-5432-bbbbbb222222",
        "senderAccountId": "111122223333",
        "receiverAccountId": "444455556666",
        "invitationTimestamp": "2021-09-15T15:14:12.580000-07:00",
        "status": "ACCEPTED"
    }
}

The output shows that the status has changed to ACCEPTED. The resources that are included in that resource share are now available to principals in the accepting account.

Use the resources that are shared with you

After you accept the invitation to join a resource share, you can perform specific actions on the shared resources. These actions vary by resource type. For more information, see Shareable Amazon resources. The resources are available directly in each resource's service console and API/CLI operations. If the resource is regional, then you must use the correct Amazon Web Services Region in the service console or API/CLI command. If the resource is global, then you must use the designated home Region, US East (N. Virginia), us-east-1 To view the resource in Amazon RAM, you must open the Amazon RAM console to the Amazon Web Services Region that the resource share was created in.