Hey, everyone, and welcome back.
Now, in today's video, we are going to discuss about the resource access manager.
Now at a high level overview, the resource access manager helps you securely share the resources that
you create in one place account with other accounts.
For example, if you look into this diagram, you have a private subnet in the account, number one,
and you have shared this private subnet with the account number two.
Similarly, you can also have multiple resources in account number one that are shared with the account.
Number two.
So once the private subnet is shared, for example, the AC two instance in the account number two can
be launched in this specific private subnet that was shared through account number one.
So this is the high level overview.
So let's do one thing.
Let's jump directly into the practical so that this feature can be better understood.
Now, currently, I have two primary AIDS related types that are open.
First one is associated with account number one.
Second tab is associated with account number two.
So these are two different set of accounts that are available.
Now let's do one thing from the account.
Number one, let's open up the resource access manager.
And within.
Currently we do not really have any shares that are available so we can go ahead and share the resources.
Now one important thing to note is that there are multiple resource types that are available.
Not all of the resource types are supported by RAM, but there are quite significant amount of them.
So you see all of these resource types are supported at this stage.
So you can use the easiest one.
For example, let's do one thing.
In fact, let's quickly go to the VPC console
and within here what we'll do, we'll quickly open up the prefix list, will quickly create a new prefix
list again in case if you do not really know what prefix list is, it is completely fine.
Our aim is to understand on how a specific resource type is shared between accounts.
So I'll say account hyphen, one prefix, hyphen list, maximum entries, I'll say five and let's add
a new entry.
I'll see a block of 192, 168, 10.0 slash 24 and the say account one prefix list in the description
as well.
We'll go ahead and create a prefix list.
All right.
Now, let's say that this prefix list is something that we want to share with the account number two
as well.
So from the account number two, let's open up the VPC console.
And in fact, let's use the same region.
So in the account number one, the region was Virginia.
So India account number two as well.
I'll use the Virginia region.
So Virginia, let's also open up the prefix list.
And currently, these are all the default prefix lists that are available.
So we'll be sharing the custom prefix list that we had created with the account.
Number two, using the resource access manager.
So in the resource manager this time, let's select the prefix list and we have one prefix list.
The name is account one prefix list that is available.
I'll click here, I'll click on next.
All right.
So we missed giving it the name, so I'll just call it as account one prefix list share.
Once this is done, let's click on next.
So these are the permissions here.
Let's do a next.
And now comes the important option related to whom do you want to share this specific resource type
with?
You can either click on allow sharing with anyone where you'll have to specify the account number of
the destination account here, or you can use the allow sharing only within your organization.
So in case you have multiple accounts within the organization, you can use that for simplicity.
Let's go ahead and use the first option.
Allow sharing with anyone and within your you have again multiple options like eight account iam user,
IAM role and so on.
I'll be selecting eight account and now we'll have to specify the account ID of the destination account
to whom we want to share this resource type.
So from the second account, let's get the account ID, I'll copy this account ID and let me paste it
over here.
I'll click on ADD.
Once this is done in the selected principle, you will see the account ID of our destination account
you can click on next.
This is a review screen related to the options that you have selected once.
Then you can go ahead and click on Create Resource Share.
All right.
So now our resource has been successfully shared.
Now from our second account over here, let's also go to the Resource Access Manager Service.
And within here, let's look into the resource shares.
You see, you have one invitation.
Let's open this up.
You have an option to either reject or accept.
So I'll click on Accept and the invitation is now accepted.
Now, if you look into the prefix list associated with a destination account, if I refresh this, you
see this account, one prefix list is now available and this destination account can make use of this
for its overall operation.
All right.
So I hope with this at a high level overview, you understood the basics of Resource Access Manager.
Now, before we conclude, there are a few important things that I wanted to show you.
Now within the documentation associated with the Resource Access Manager, as we're seeing that there
are multiple resource types and services that are available.
Let's go a bit down here.
I have Mesh, you have Aurora, you have certificate manager, code build and so on.
Now each service has a specific functionality related to whom you can share the resource with.
For example, for Aurora, you cannot share it with IAM rules and users, but you can share it with
accounts outside its organizations.
If I quickly search for subnets over here, let's go a bit down within these subnets, which is the
easy to subnets.
You see it states can share only with the accounts in its own organization grid.
So that's the very high level overview about the resource access manager.
Again, whenever you want to share a specific resource, make sure that you go through the documentation
to see to whom you can go ahead and share the resource with along with certain important information
related to that.
So with this will conclude today's video.