Share an IPAM pool using Amazon RAM
Follow the steps in this section to share an IPAM pool using Amazon Resource Access Manager
(RAM). When you share an IPAM pool with RAM, “principals” can allocate CIDRs from the pool
to Amazon resources, such as VPCs, from their respective accounts. A principal is a concept
in RAM that means any Amazon account, IAM role or organizational unit in Amazon Organizations.
For more information, see Sharing
your Amazon resources
Note
-
You can only share an IPAM pool with Amazon RAM if you've integrated IPAM with Amazon Organizations. For more information, see Integrate IPAM with accounts in an Amazon Organization. You cannot share an IPAM pool with Amazon RAM if you are a single account IPAM user.
-
You must enable resource sharing with Amazon Organizations in Amazon RAM. For more information, see Enable resource sharing within Amazon Organizations
in the Amazon RAM User Guide. -
RAM sharing is only available in the home Amazon Region of your IPAM. You must create the share in the Amazon Region that the IPAM is in, not in the Region of the IPAM pool.
-
The account that creates and deletes IPAM pool resource shares must have the following permissions in the IAM policy attached to their IAM role:
-
ec2:PutResourcePolicy
-
ec2:DeleteResourcePolicy
-
You can add multiple IPAM pools to a RAM share.
While you can share IPAM pools with any Amazon account outside an Amazon Organization, IPAM will only monitor the IP addresses in accounts outside the Organization if the account owner has gone through the process of sharing their resource discovery with the delegated IPAM admin as described in Integrate IPAM with accounts outside of your organization.
As a result of creating the resource share in RAM, other principals can now allocate CIDRs to resources using the IPAM pool. For information on monitoring resources created by principals, see Monitor CIDR usage by resource. For more information on how to create a VPC and allocate a CIDR from a shared IPAM pool, see Create a VPC in the Amazon VPC User Guide.