paws.security.identity (version 0.1.0)

ram: AWS Resource Access Manager

Description

Use AWS Resource Access Manager to share AWS resources between AWS accounts. To share a resource, you create a resource share, associate the resource with the resource share, and specify the principals that can access the resource. The following principals are supported:

  • The ID of an AWS account

  • The Amazon Resource Name (ARN) of an OU from AWS Organizations

  • The Amazon Resource Name (ARN) of an organization from AWS Organizations

If you specify an AWS account that doesn't exist in the same organization as the account that owns the resource share, the owner of the specified account receives an invitation to accept the resource share. After the owner accepts the invitation, they can access the resources in the resource share. An administrator of the specified account can use IAM policies to restrict access resources in the resource share.

Usage

ram()

Arguments

Operations

accept_resource_share_invitation Accepts an invitation to a resource share from another AWS account
associate_resource_share Associates the specified resource share with the specified principals and resources
create_resource_share Creates a resource share
delete_resource_share Deletes the specified resource share
disassociate_resource_share Disassociates the specified principals or resources from the specified resource share
enable_sharing_with_aws_organization Enables resource sharing within your organization
get_resource_policies Gets the policies for the specifies resources
get_resource_share_associations Gets the associations for the specified resource share
get_resource_share_invitations Gets the specified invitations for resource sharing
get_resource_shares Gets the specified resource shares or all of your resource shares
list_principals Lists the principals with access to the specified resource
list_resources Lists the resources that the specified principal can access
reject_resource_share_invitation Rejects an invitation to a resource share from another AWS account
tag_resource Adds the specified tags to the specified resource share
untag_resource Removes the specified tags from the specified resource share

Examples

Run this code
# NOT RUN {
svc <- ram()
svc$accept_resource_share_invitation(
  Foo = 123
)
# }
# NOT RUN {
# }

Run the code above in your browser using DataCamp Workspace