AWS ram documentation change
Summary
Added Oracle Database@AWS resource sharing documentation
Security assessment
The change adds resource-sharing constraints for Oracle Database@AWS resources, which involves security controls (sharing within an organization only). This documents security-related resource isolation but does not address a specific vulnerability.
Diff
diff --git a/ram/latest/userguide/shareable.md b/ram/latest/userguide/shareable.md index f83ca3e2f..95566a314 100644 --- a//ram/latest/userguide/shareable.md +++ b//ram/latest/userguide/shareable.md @@ -5 +5 @@ -AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockAWS Billing View ServiceAWS CloudHSMAWS CodeBuildAWS CodeConnectionsAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesMulti-party approvalAWS Network FirewallAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems ManagerAmazon VPCAmazon VPC LatticeAWS Cloud WAN +AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockAWS Billing View ServiceAWS CloudHSMAWS CodeBuildAWS CodeConnectionsAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesMulti-party approvalAWS Network FirewallOracle Database@AWSAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems ManagerAmazon VPCAmazon VPC LatticeAWS Cloud WAN @@ -219,0 +220,9 @@ Rule groups `network-firewall:StatefulRuleGroup` `network-firewall:StatelessRule +## Oracle Database@AWS + +You can share the following Oracle Database@AWS resources by using AWS RAM. + +Resource type and code | Use case | Can share with IAM users and roles | Can share with accounts outside its organization | Can use customer managed permissions | Can share with service principals +---|---|---|---|---|--- +Oracle Database@AWS Exadata Infrastructure `odb:CloudExadataInfrastructure` | With Oracle Database@AWS, you can share your Exadata infrastructure and your ODB network across multiple AWS accounts in the same AWS organization. This enables you to provision infrastructure once and reuse it across trusted accounts, allowing you to reduce costs while separating responsibilities. For more information, see [Resource sharing in Oracle Database@AWS](https://docs.aws.amazon.com/odb/latest/UserGuide/resource-sharing.html) in the _Oracle Database@AWS User Guide_. | No | No Can share with **only** AWS accounts in its own organization. | No | No +Oracle Database@AWS ODB network `odb:OdbNetwork` | With Oracle Database@AWS, you can share your Exadata infrastructure and ODB network across multiple AWS accounts in the same AWS organization. This enables you to provision infrastructure once and reuse it across trusted accounts, allowing you to reduce costs while separating responsibilities. For more information, see [Resource sharing in Oracle Database@AWS](https://docs.aws.amazon.com/odb/latest/UserGuide/resource-sharing.html) in the _Oracle Database@AWS User Guide_. | No | No Can share with **only** AWS accounts in its own organization. | No | No +