Working with shared multicast domains - Amazon VPC
Prerequisites for sharing a multicast domainRelated servicesSharing across Availability ZonesSharing a multicast domainUnsharing a shared multicast domainIdentifying a shared multicast domainShared multicast domain permissionsBilling and meteringQuotas
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Working with shared multicast domains

With multicast domain sharing, multicast domain owners can share the domain with other Amazon accounts inside its organization or across organizations in Amazon Organizations. As the multicast domain owner, you can create and manage the multicast domain centrally. Consumers can perform the following operations on a shared multicast domain:

  • Register and deregister group members or group sources in the multicast domain

  • Associate a subnet with the multicast domain, and disassociate subnets from the multicast domain

A multicast domain owner can share a multicast domain with:

  • Amazon accounts inside its organization or across organizations in Amazon Organizations

  • An organizational unit inside its organization in Amazon Organizations

  • Its entire organization in Amazon Organizations

  • Amazon accounts outside of Amazon Organizations.

    To share a multicast domain with an Amazon account outside of your Organization, you must create a resource share using Amazon Resource Access Manager, and then choose Allow sharing with anyone when selecting the Principals to share the multicast domain with. For more information on creating a resource share, see Creating a resource share in Amazon RAM in the Amazon RAM User Guide

Prerequisites for sharing a multicast domain

  • To share a multicast domain, you must own it in your Amazon account. You cannot share a multicast domain that has been shared with you.

  • To share a multicast domain with your organization or an organizational unit in Amazon Organizations, you must enable sharing with Amazon Organizations. For more information, see Enable Sharing with Amazon Organizations in the Amazon RAM User Guide.

Multicast domain sharing integrates with Amazon Resource Access Manager (Amazon RAM). Amazon RAM is a service that enables you to share your Amazon resources with any Amazon account or through Amazon Organizations. With Amazon RAM, you share resources that you own by creating a resource share. A resource share specifies the resources to share, and the consumers with whom to share them. Consumers can be individual Amazon accounts, or organizational units or an entire organization in Amazon Organizations.

For more information about Amazon RAM, see the Amazon RAM User Guide.

Sharing across Availability Zones

To ensure that resources are distributed across the Availability Zones for a Region, we independently map Availability Zones to names for each account. This could lead to Availability Zone naming differences across accounts. For example, the Availability Zone us-east-1a for your Amazon account might not have the same location as us-east-1a for another Amazon account.

To identify the location of your multicast domain relative to your accounts, you must use the Availability Zone ID (AZ ID). The AZ ID is a unique and consistent identifier for an Availability Zone across all Amazon accounts. For example, use1-az1 is an AZ ID for the us-east-1 Region and it is the same location in every Amazon account.

To view the AZ IDs for the Availability Zones in your account

  1. Open the Amazon RAM console at https://console.amazonaws.cn/ram.

  2. The AZ IDs for the current Region are displayed in the Your AZ ID panel on the right-hand side of the screen.

Sharing a multicast domain

When an owner shares a multicast domain with a consumer, the consumer can do the following:

  • Register and deregister group members or group sources

  • Associate and disassociate subnets

To share a multicast domain, you must add it to a resource share. A resource share is an Amazon RAM resource that lets you share your resources across Amazon accounts. A resource share specifies the resources to share, and the consumers with whom they are shared. When you share a multicast domain using the Amazon Virtual Private Cloud Console, you add it to an existing resource share. To add the multicast domain to a new resource share, you must first create the resource share using the Amazon RAM console.

If you are part of an organization in Amazon Organizations and sharing within your organization is enabled, consumers in your organization are automatically granted access to the shared multicast domain. Otherwise, consumers receive an invitation to join the resource share and are granted access to the shared multicast domain after accepting the invitation.

You can share a multicast domain that you own using the *Amazon Virtual Private Cloud Console console, Amazon RAM console, or the Amazon CLI.

To share a multicast domain that you own using the *Amazon Virtual Private Cloud Console

  1. Open the Amazon VPC console at https://console.amazonaws.cn/vpc/.

  2. In the navigation pane, choose Multicast Domains.

  3. Select your multicast domain, and then choose Actions, Share multicast domain.

  4. Select your resource share and choose Share multicast domain.

To share a multicast domain that you own using the Amazon RAM console

See Creating a Resource Share in the Amazon RAM User Guide.

To share a multicast domain that you own using the Amazon CLI

Use the create-resource-share command.

Unsharing a shared multicast domain

When a shared multicast domain is unshared, the following happens to consumer multicast domain resources:

  • Consumer subnets are disassociated from the multicast domain. The subnets remain in the consumer account.

  • Consumer group sources and group members are disassociated from the multicast domain, and then deleted from the consumer account.

To unshare a multicast domain, you must remove it from the resource share. You can do this from the Amazon RAM console or the Amazon CLI.

To unshare a shared multicast domain that you own, you must remove it from the resource share. You can do this using the *Amazon Virtual Private Cloud Console, Amazon RAM console, or the Amazon CLI.

To unshare a shared multicast domain that you own using the *Amazon Virtual Private Cloud Console

  1. Open the Amazon VPC console at https://console.amazonaws.cn/vpc/.

  2. In the navigation pane, choose Multicast Domains.

  3. Select your multicast domain, and then choose Actions, Stop sharing.

To unshare a shared multicast domain that you own using the Amazon RAM console

See Updating a Resource Share in the Amazon RAM User Guide.

To unshare a shared multicast domain that you own using the Amazon CLI

Use the disassociate-resource-share command.

Identifying a shared multicast domain

Owners and consumers can identify shared multicast domains using the *Amazon Virtual Private Cloud Console and Amazon CLI

To identify a shared multicast domain using the *Amazon Virtual Private Cloud Console

  1. Open the Amazon VPC console at https://console.amazonaws.cn/vpc/.

  2. In the navigation pane, choose Multicast Domains.

  3. Select your multicast domain.

  4. On the Transit Multicast Domain Details page, view the Owner ID to identify the Amazon account ID of the multicast domain.

To identify a shared multicast domain using the Amazon CLI

Use the describe-transit-gateway-multicast-domains command. The command returns the multicast domains that you own and multicast domains that are shared with you. OwnerId shows the Amazon account ID of the multicast domain owner.

Shared multicast domain permissions

Permissions for owners

Owners are responsible for managing the multicast domain and the members and attachments that they register or associate with the domain. Owners can change or revoke shared access at any time. They can use Amazon Organizations to view, modify, and delete resources that consumers create on shared multicast domains.

Permissions for consumers

Consumers can perform the following operations on shared multicast domains in the same way that they would on multicast domains that they created:

  • Register and deregister group members or group sources in the multicast domain

  • Associate a subnet with the multicast domain, and disassociate subnets from the multicast domain

Consumers are responsible for managing the resources that they create on the shared multicast domain.

Customers cannot view or modify resources owned by other consumers or by the multicast domain owner, and they cannot modify multicast domains that are shared with them.

Billing and metering

There are no additional charges for sharing multicast domains for either the owner, or consumers.

Quotas

A shared multicast domain counts toward the owner's and consumer's multicast domain quotas.