ResourceShare

Source: src/AWS/RAM/ResourceShare.ts

An AWS Resource Access Manager (RAM) resource share.

A resource share grants principals (accounts, organizational units, or IAM identities) access to a set of shared resources identified by ARN.

Creating a Resource Share

Share subnets with an organizational unit

const share = yield* ResourceShare("NetworkShare", {
  resourceArns: [subnet.subnetArn],
  principals: [ou.ouArn],
  allowExternalPrincipals: false,
});

Share with an external account

const share = yield* ResourceShare("ExternalShare", {
  resourceArns: [resolverRule.arn],
  principals: ["123456789012"],
  allowExternalPrincipals: true,
  tags: { team: "platform" },
});