AWS Resource Access Manager
#108 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”With AWS Resource Access Manager (RAM), you can share one account’s resources with other accounts. The owner of a resource creates a resource share and decides which accounts, OUs or the whole Organization can use it. Many kinds of resources can be shared this way, such as Subnets, Transit Gateways and Route 53 Resolver rules. The resource stays in the owner’s account; others only use it as their permissions allow. Together with AWS Organizations, it reduces waste in large multi-account environments.
Simple example
Section titled “Simple example”Brothers and sisters in the same house share one car — no one needs to buy their own.
Why it’s needed
Section titled “Why it’s needed”Large companies have many accounts. Building the same network or resource separately in each one is wasteful.
Where it’s used
Section titled “Where it’s used”Sharing the subnets of one central VPC with many accounts.
Azure equivalent
Section titled “Azure equivalent”Azure Lighthouse / shared resources across subscriptions
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: