Working with associated accounts to publish and consume data

Associating your AWS accounts with your Amazon DataZone domain enables domain users to publish and consume data from these AWS accounts. There are three steps to setting up an account association.

• First, share the domain with the desired AWS account by requesting association. Amazon DataZone uses AWS Resource Access Manager (RAM) if the AWS account is different from the domain’s AWS account. An account association can only be initiated by the Amazon DataZone domain.

• Second, have the account owner accept the association request.

• Third, have the account owner enable the desired environment blueprints. By enabling a blueprint, the account owner is providing users in the domain the IAM roles and resource configurations necessary to create and access resources in their account, such as AWS Glue databases and Amazon Redshift clusters.

Topics

• Request association with other AWS accounts
• Accept an account association request from an Amazon DataZone domain and enable an environment blueprint
• Reject an account association request from an Amazon DataZone domain
• Enable an environment blueprint in an associated AWS account
• Add Amazon SageMaker as a trusted service in the associated AWS account
• Remove an associated account