View Source AWS.RAM (aws-elixir v0.13.1)

This is the Resource Access Manager API Reference.

This documentation provides descriptions and syntax for each of the actions and data types in RAM. RAM is a service that helps you securely share your Amazon Web Services resources across Amazon Web Services accounts. If you have multiple Amazon Web Services accounts, you can use RAM to share those resources with other accounts. If you use Organizations to manage your accounts, then you share your resources with your organization or organizational units (OUs). For supported resource types, you can also share resources with individual Identity and Access Management (IAM) roles an users.

To learn more about RAM, see the following resources:

Link to this section Summary

Functions

Accepts an invitation to a resource share from another Amazon Web Services account.

Adds the specified list of principals and list of resources to a resource share.

Adds or replaces the RAM permission for a resource type included in a resource share.

Deletes the specified resource share.

Disassociates the specified principals or resources from the specified resource share.

Disassociates an RAM permission from a resource share.

Enables resource sharing within your organization in Organizations.

Gets the contents of an RAM permission in JSON format.

Retrieves the resource policies for the specified resources that you own and have shared.

Retrieves the resource and principal associations for resource shares that you own.

Retrieves details about invitations that you have received for resource shares.

Retrieves details about the resource shares that you own or that are shared with you.

Lists the resources in a resource share that is shared with you but for which the invitation is still PENDING.

Lists the available versions of the specified RAM permission.

Retrieves a list of available RAM permissions that you can use for the supported resource types.

Lists the principals that you are sharing resources with or that are sharing resources with you.

Lists the RAM permissions that are associated with a resource share.

Lists the resource types that can be shared by RAM.

Lists the resources that you added to a resource share or the resources that are shared with you.

When you attach a resource-based permission policy to a resource, it automatically creates a resource share.

Rejects an invitation to a resource share from another Amazon Web Services account.

Adds the specified tag keys and values to the specified resource share.

Removes the specified tag key and value pairs from the specified resource share.

Modifies some of the properties of the specified resource share.

Link to this section Functions

Link to this function

accept_resource_share_invitation(client, input, options \\ [])

View Source

Accepts an invitation to a resource share from another Amazon Web Services account.

After you accept the invitation, the resources included in the resource share are available to interact with in the relevant Amazon Web Services Management Consoles and tools.

Link to this function

associate_resource_share(client, input, options \\ [])

View Source

Adds the specified list of principals and list of resources to a resource share.

Principals that already have access to this resource share immediately receive access to the added resources. Newly added principals immediately receive access to the resources shared in this resource share.

Link to this function

associate_resource_share_permission(client, input, options \\ [])

View Source

Adds or replaces the RAM permission for a resource type included in a resource share.

You can have exactly one permission associated with each resource type in the resource share. You can add a new RAM permission only if there are currently no resources of that resource type currently in the resource share.

Link to this function

create_resource_share(client, input, options \\ [])

View Source

Creates a resource share.

You can provide a list of the Amazon Resource Names (ARNs) for the resources that you want to share, a list of principals you want to share the resources with, and the permissions to grant those principals.

Sharing a resource makes it available for use by principals outside of the Amazon Web Services account that created the resource. Sharing doesn't change any permissions or quotas that apply to the resource in the account that created it.

Link to this function

delete_resource_share(client, input, options \\ [])

View Source

Deletes the specified resource share.

This doesn't delete any of the resources that were associated with the resource share; it only stops the sharing of those resources outside of the Amazon Web Services account that created them.

Link to this function

disassociate_resource_share(client, input, options \\ [])

View Source

Disassociates the specified principals or resources from the specified resource share.

Link to this function

disassociate_resource_share_permission(client, input, options \\ [])

View Source

Disassociates an RAM permission from a resource share.

Permission changes take effect immediately. You can remove a RAM permission from a resource share only if there are currently no resources of the relevant resource type currently attached to the resource share.

Link to this function

enable_sharing_with_aws_organization(client, input, options \\ [])

View Source

Enables resource sharing within your organization in Organizations.

Calling this operation enables RAM to retrieve information about the organization and its structure. This lets you share resources with all of the accounts in an organization by specifying the organization's ID, or all of the accounts in an organizational unit (OU) by specifying the OU's ID. Until you enable sharing within the organization, you can specify only individual Amazon Web Services accounts, or for supported resource types, IAM users and roles.

You must call this operation from an IAM user or role in the organization's management account.

Link to this function

get_permission(client, input, options \\ [])

View Source

Gets the contents of an RAM permission in JSON format.

Link to this function

get_resource_policies(client, input, options \\ [])

View Source

Retrieves the resource policies for the specified resources that you own and have shared.

Link to this function

get_resource_share_associations(client, input, options \\ [])

View Source

Retrieves the resource and principal associations for resource shares that you own.

Link to this function

get_resource_share_invitations(client, input, options \\ [])

View Source

Retrieves details about invitations that you have received for resource shares.

Link to this function

get_resource_shares(client, input, options \\ [])

View Source

Retrieves details about the resource shares that you own or that are shared with you.

Link to this function

list_pending_invitation_resources(client, input, options \\ [])

View Source

Lists the resources in a resource share that is shared with you but for which the invitation is still PENDING.

That means that you haven't accepted or rejected the invitation and the invitation hasn't expired.

Link to this function

list_permission_versions(client, input, options \\ [])

View Source

Lists the available versions of the specified RAM permission.

Link to this function

list_permissions(client, input, options \\ [])

View Source

Retrieves a list of available RAM permissions that you can use for the supported resource types.

Link to this function

list_principals(client, input, options \\ [])

View Source

Lists the principals that you are sharing resources with or that are sharing resources with you.

Link to this function

list_resource_share_permissions(client, input, options \\ [])

View Source

Lists the RAM permissions that are associated with a resource share.

Link to this function

list_resource_types(client, input, options \\ [])

View Source

Lists the resource types that can be shared by RAM.

Link to this function

list_resources(client, input, options \\ [])

View Source

Lists the resources that you added to a resource share or the resources that are shared with you.

Link to this function

promote_resource_share_created_from_policy(client, input, options \\ [])

View Source

When you attach a resource-based permission policy to a resource, it automatically creates a resource share.

However, resource shares created this way are visible only to the resource share owner, and the resource share can't be modified in RAM.

You can use this operation to promote the resource share to a full RAM resource share. When you promote a resource share, you can then manage the resource share in RAM and it becomes visible to all of the principals you shared it with.

Link to this function

reject_resource_share_invitation(client, input, options \\ [])

View Source

Rejects an invitation to a resource share from another Amazon Web Services account.

Link to this function

tag_resource(client, input, options \\ [])

View Source

Adds the specified tag keys and values to the specified resource share.

The tags are attached only to the resource share, not to the resources that are in the resource share.

Link to this function

untag_resource(client, input, options \\ [])

View Source

Removes the specified tag key and value pairs from the specified resource share.

Link to this function

update_resource_share(client, input, options \\ [])

View Source

Modifies some of the properties of the specified resource share.