By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Sharing resources from child account to organization

0

I am aiming to setup an infrastructure child account in our org to share a transit gateway with aims to move from control tower nat gateway. I have configured through the management account the enabling of shared resources in resource manager for the org, however when I try to create the share in the child account for the rest of the org, I get an error that the org cannot be found as a principal.

If there is a better way to do this I am open to suggestions!

Topics
Security, Identity, & ComplianceManagement & GovernanceNetworking & Content Delivery
Tags
AWS Resource Access ManagerAWS OrganizationsAWS Transit Gateway
Language
English
Charlie
asked 2 months ago187 views
1 Answer
1

It can be solved using Resource Access Manager. Ensure that the user or role attempting to create the share in the child account has the necessary permissions. The user/role should have the ram:CreateResourceShare and ram:AssociateResourceShare permissions. Also make sure that the Resource Manager service is properly enabled and configured in the child account. The child account should have the resource-manager.amazonaws.com service-linked role created.

https://docs.aws.amazon.com/ram/latest/userguide/getting-started-sharing.html https://docs.aws.amazon.com/ram/latest/userguide/shareable.html

profile pictureAWS
EXPERT
Srini V
answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content