Getting Started with AWS Resource Access Manager (RAM)

Introduction

Welcome to our guide on AWS Resource Access Manager (RAM). AWS RAM is a powerful tool that allows you to securely share your AWS resources with other AWS accounts. Whether you're part of a large organization with multiple accounts or just need to share resources with partners, AWS RAM makes it easy to do so without complex setup.

In this blog post, we'll cover the basics of AWS RAM, its benefits, and a step-by-step guide to getting started.

What is AWS Resource Access Manager (RAM)?

AWS RAM is a service that helps you share AWS resources across AWS accounts. You can share resources with any AWS account, organizational unit, or organization in AWS Organizations. This eliminates the need to create duplicate resources in each account, leading to cost savings and simplified management.

Benefits of AWS RAM

1. Simplified Resource Management: Share resources instead of duplicating them.
2. Cost Efficiency: Avoid unnecessary costs by using shared resources.
3. Improved Security: Securely share resources with granular access control.
4. Ease of Use: Simple setup and management through the AWS Management Console, CLI, or SDKs.

Step-by-Step Guide to Getting Started with AWS RAM

Prerequisites

• An AWS account
• Appropriate IAM permissions to use AWS RAM
• Resources you want to share (e.g., VPC subnets, Transit Gateways, License Manager configurations)

Step 1: Create a Resource Share

1. Log in to the AWS Management Console.
2. Navigate to AWS Resource Access Manager.
3. Click on Create resource share.
4. Provide a name for your resource share.

Step 2: Select Resources to Share

1. Choose the resource type you want to share from the drop-down list (e.g., VPC subnets, Transit Gateways).
2. Select the specific resources you want to share.
3. Click Next.

Step 3: Add Principals

1. Choose the accounts or organizational units you want to share the resources with.
2. Enter the AWS account ID(s) or select from your AWS Organization.
3. Click Next.

Step 4: Configure Permissions

1. Choose the permissions you want to grant for the shared resources.
2. Select a predefined policy or create a custom one if needed.
3. Review the permissions and make sure they meet your needs.
4. Click Next.

Step 5: Review and Create

1. Review all the details of your resource share.
2. If everything looks correct, click Create resource share.

Step 6: Accept the Resource Share (For the Receiver)

1. The recipient will receive an invitation in their AWS Management Console.
2. They need to log in to their AWS account and navigate to AWS RAM.
3. Go to Shared with me.
4. Find the resource share invitation and click Accept.

Conclusion

AWS Resource Access Manager is a great tool to streamline resource sharing across AWS accounts. By following the steps outlined in this guide, you can easily set up and manage resource shares, improving efficiency and security within your AWS environment.