Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Use online store shared resources with access permissions

The resource owner account must grant permissions to resource consumer accounts to allow for discoverability, read-only, write, or admin privileges with a shared resource. In the following sections, we provide instructions on how to accept an invitation to access shared resources and provide examples showing how to view and interact with shared feature groups.

Accept an invitation to access shared resources using Amazon RAM

As the resource consumer account, you will receive an invitation to join a resource share once the resource owner account has granted permission. To accept the invitation to any shared resources, open the Shared with me: Resource shares page in the Amazon RAM console to view and respond to invitations. Invitations are not sent in these cases:

For more information about accepting and using a resource share in Amazon RAM, see Using shared Amazon resources in the Amazon RAM User Guide.

View shared resources on the Amazon RAM console

Granting any access permissions does not grant resource consumer accounts the discoverability permission, so the resource consumer accounts with access permissions cannot search and discover those feature groups. To allow for resource consumer accounts to search and discover feature groups from the resource owner account, the resource owner account must grant the discoverability permission to the resource consumer accounts, where all of the feature groups within the resource owner account are discoverable by the resource consumer accounts. For more information about granting the discoverability permission, see Enabling cross account discoverability.

To view the shared resources on the Amazon RAM console, open the Shared with me: Resource shares page in the Amazon RAM console.

Read and write actions with a shared feature groups example

Once your resource consumer account is granted the appropriate permissions by the resource owner account, you can perform actions on the shared resources using the Feature Store SDK. You can do this by providing the resource ARN as the FeatureGroupName. To obtain the Feature Group ARN, you can use the Amazon SDK for Python (Boto3) DescribeFeatureGroup function or use the console UI. For information about using the console UI to view feature group details, see View feature group details from the console.

The following examples use PutRecord and GetRecord with a shared feature group entity. See the request and response syntax in the Amazon SDK for Python (Boto3) documentation for PutRecord and GetRecordAPIs.

import boto3

sagemaker_featurestore_runtime = boto3.client('sagemaker-featurestore-runtime')

# Put record into feature group named 'test-fg' within the resource owner account ID 111122223333
featurestore_runtime.put_record(
    FeatureGroupName="arn:aws:sagemaker:us-east-1:111122223333:feature-group/test-fg", 
    Record=[value.to_dict() for value in record] # You will need to define record prior to calling PutRecord
)

import boto3

sagemaker_featurestore_runtime = boto3.client('sagemaker-featurestore-runtime')

# Choose record identifier
record_identifier_value = str(2990130)

# Get record from feature group named 'test-fg' within the resource owner account ID 111122223333
featurestore_runtime.get_record(
    FeatureGroupName="arn:aws:sagemaker:us-east-1:111122223333:feature-group/test-fg", 
    RecordIdentifierValueAsString=record_identifier_value
)

For more information about granting permissions to feature group entities, see Share your feature group entities.