Table Of Contents

Feedback

User Guide

First time using the AWS CLI? See the User Guide for help getting started.

Note: You are viewing the documentation for an older major version of the AWS CLI (version 1).

AWS CLI version 2, the latest major version of AWS CLI, is now stable and recommended for general use. To view this page for the AWS CLI version 2, click here. For more information see the AWS CLI version 2 installation instructions and migration guide.

[ aws . ram ]

create-resource-share

Description

Creates a resource share.

See also: AWS API Documentation

See 'aws help' for descriptions of global parameters.

Synopsis

  create-resource-share
--name <value>
[--resource-arns <value>]
[--principals <value>]
[--tags <value>]
[--allow-external-principals | --no-allow-external-principals]
[--client-token <value>]
[--permission-arns <value>]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]

Options

--name (string)

The name of the resource share.

--resource-arns (list)

The Amazon Resource Names (ARN) of the resources to associate with the resource share.

(string)

Syntax:

"string" "string" ...

--principals (list)

The principals to associate with the resource share. The possible values are IDs of AWS accounts, the ARN of an OU or organization from AWS Organizations.

(string)

Syntax:

"string" "string" ...

--tags (list)

One or more tags.

(structure)

Information about a tag.

key -> (string)

The key of the tag.

value -> (string)

The value of the tag.

Shorthand Syntax:

key=string,value=string ...

JSON Syntax:

[
  {
    "key": "string",
    "value": "string"
  }
  ...
]

--allow-external-principals | --no-allow-external-principals (boolean)

Indicates whether principals outside your AWS organization can be associated with a resource share.

--client-token (string)

A unique, case-sensitive identifier that you provide to ensure the idempotency of the request.

--permission-arns (list)

The ARNs of the permissions to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type.

(string)

Syntax:

"string" "string" ...

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

See 'aws help' for descriptions of global parameters.

Examples

Example 1: To create a resource share

The following create-resource-share example creates a resource share with the specified name.

aws ram create-resource-share \
    --name my-resource-share

Output:

{
    "resourceShare": {
        "resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
        "name": "my-resource-share",
        "owningAccountId": "123456789012",
        "allowExternalPrincipals": true,
        "status": "ACTIVE",
        "creationTime": 1565295733.282,
        "lastUpdatedTime": 1565295733.282
    }
}

Example 2: To create a resource share with AWS accounts as principals

The following create-resource-share example creates a resource share and adds the specified principals.

aws ram create-resource-share \
    --name my-resource-share \
    --principals 0abcdef1234567890

EXAMPLE 3: To create a resource share restricted to your organization in AWS Organizations

The following create-resource-share example creates a resource share that is restricted to your organization and adds the specified OU as a principal.

aws ram create-resource-share \
    --name my-resource-share \
    --no-allow-external-principals \
    --principals arn:aws:organizations::123456789012:ou/o-gx7EXAMPLE/ou-29c5-zEXAMPLE

Output:

{
    "resourceShare": {
        "resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/3ab63985-99d9-1cd2-7d24-75e93EXAMPLE",
        "name": "my-resource-share",
        "owningAccountId": "123456789012",
        "allowExternalPrincipals": false,
        "status": "ACTIVE",
        "creationTime": 1565295733.282,
        "lastUpdatedTime": 1565295733.282
    }
}

Output

resourceShare -> (structure)

Information about the resource share.

resourceShareArn -> (string)

The Amazon Resource Name (ARN) of the resource share.

name -> (string)

The name of the resource share.

owningAccountId -> (string)

The ID of the AWS account that owns the resource share.

allowExternalPrincipals -> (boolean)

Indicates whether principals outside your AWS organization can be associated with a resource share.

status -> (string)

The status of the resource share.

statusMessage -> (string)

A message about the status of the resource share.

tags -> (list)

The tags for the resource share.

(structure)

Information about a tag.

key -> (string)

The key of the tag.

value -> (string)

The value of the tag.

creationTime -> (timestamp)

The time when the resource share was created.

lastUpdatedTime -> (timestamp)

The time when the resource share was last updated.

featureSet -> (string)

Indicates how the resource share was created. Possible values include:

  • CREATED_FROM_POLICY - Indicates that the resource share was created from an AWS Identity and Access Management (AWS IAM) policy attached to a resource. These resource shares are visible only to the AWS account that created it. They cannot be modified in AWS RAM.
  • PROMOTING_TO_STANDARD - The resource share is in the process of being promoted. For more information, see PromoteResourceShareCreatedFromPolicy .
  • STANDARD - Indicates that the resource share was created in AWS RAM using the console or APIs. These resource shares are visible to all principals. They can be modified in AWS RAM.

clientToken -> (string)

A unique, case-sensitive identifier that you provide to ensure the idempotency of the request.