AWS ram documentation change
Summary
Reorganized service sections, added CloudFront VpcOrigin sharing documentation, moved CloudHSM section, and removed standalone Cloud WAN section
Security assessment
Changes involve reorganizing existing content and adding documentation for CloudFront VpcOrigin sharing. While CloudHSM backups and network sharing have security implications, these are existing features being moved rather than new security fixes. No evidence of addressing vulnerabilities or security incidents.
Diff
diff --git a/ram/latest/userguide/shareable.md b/ram/latest/userguide/shareable.md index 36827048d..05d9c337f 100644 --- a//ram/latest/userguide/shareable.md +++ b//ram/latest/userguide/shareable.md @@ -5 +5 @@ -AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockBilling and Cost ManagementAWS Billing View ServiceAWS CloudHSMAWS Cloud MapAWS CodeBuildAWS CodeConnectionsAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesMulti-party approvalAWS Network FirewallOracle Database@AWSAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems ManagerAmazon VPCAmazon VPC LatticeAWS Cloud WAN +AWS App MeshAWS AppSync GraphQL APIAmazon API GatewayAmazon Application Recovery Controller (ARC)Amazon AuroraAWS BackupAmazon BedrockBilling and Cost ManagementAWS Billing View ServiceAWS Cloud MapAWS Cloud WANAmazon CloudFrontAWS CloudHSMAWS CodeBuildAWS CodeConnectionsAmazon DataZoneAmazon EC2EC2 Image BuilderElastic Load BalancingAWS End User Messaging SMSAmazon FSx for OpenZFSAWS GlueAWS License ManagerAWS MarketplaceAWS Migration Hub Refactor SpacesMulti-party approvalAWS Network FirewallOracle Database@AWSAWS OutpostsAmazon S3 on OutpostsAWS Private Certificate AuthorityAWS Resource ExplorerAWS Resource GroupsAmazon Route 53Amazon Simple Storage ServiceAmazon SageMaker AIAWS Service Catalog AppRegistryAWS Systems Manager Incident ManagerAWS Systems ManagerAmazon VPCAmazon VPC Lattice @@ -92 +92 @@ Billing Views `billing:billingview` | Create and manage custom billing views ce -## AWS CloudHSM +## AWS Cloud Map @@ -94 +94 @@ Billing Views `billing:billingview` | Create and manage custom billing views ce -You can share the following AWS CloudHSM resources by using AWS RAM. +You can share the following AWS Cloud Map resources by using AWS RAM. @@ -98 +98 @@ Resource type and code | Use case | Can share with IAM users and roles | Can sha -AWS CloudHSM Backups `cloudhsm:Backup` | Manage AWS CloudHSM Backups centrally, and share them with other AWS accounts or your organization. This lets multiple AWS accounts and users view information about the Backup and use it to restore a AWS CloudHSM Cluster. For more information, see [Managing AWS CloudHSM backups](https://docs.aws.amazon.com/cloudhsm/latest/userguide/manage-backups.html) in the _AWS CloudHSM User Guide_. | Yes | Yes | Yes | No +AWS Cloud Map Namespaces `servicediscovery:Namespace` | Create and manage namespaces centrally, and share them with other AWS accounts within your organization. This lets multiple AWS accounts discover services and instances in the shared namespace without the need for temporary credentials. For more information, see [Shared AWS Cloud Map namespaces](https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html) in the _AWS Cloud Map Developer Guide_. | Yes | No Can share with **only** AWS accounts in its own organization. | Yes | No @@ -100 +100 @@ AWS CloudHSM Backups `cloudhsm:Backup` | Manage AWS CloudHSM Backups centrally, -## AWS Cloud Map +## AWS Cloud WAN @@ -102 +102 @@ AWS CloudHSM Backups `cloudhsm:Backup` | Manage AWS CloudHSM Backups centrally, -You can share the following AWS Cloud Map resources by using AWS RAM. +You can share the following AWS Cloud WAN resources by using AWS RAM. @@ -106 +106,17 @@ Resource type and code | Use case | Can share with IAM users and roles | Can sha -AWS Cloud Map Namespaces `servicediscovery:Namespace` | Create and manage namespaces centrally, and share them with other AWS accounts within your organization. This lets multiple AWS accounts discover services and instances in the shared namespace without the need for temporary credentials. For more information, see [Shared AWS Cloud Map namespaces](https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html) in the _AWS Cloud Map Developer Guide_. | Yes | No Can share with **only** AWS accounts in its own organization. | Yes | No +Core networks `networkmanager:CoreNetwork` | Create and manage a Cloud WAN core network centrally, and share it with other AWS accounts. This lets multiple AWS accounts access and provision hosts on a single Cloud WAN core network. For more information, see [Share a core network](https://docs.aws.amazon.com/vpc/latest/cloudwan/cloudwan-share-network.html) in the _AWS Cloud WAN User Guide_. | Yes | Yes Can share with **any** AWS account. | No | No + +## Amazon CloudFront + +You can share the following Amazon CloudFront resources by using AWS RAM. + +Resource type and code | Use case | Can share with IAM users and roles | Can share with accounts outside its organization | Can use customer managed permissions | Can share with service principals +---|---|---|---|---|--- +Amazon CloudFront VpcOrigin `cloudfront:VpcOrigin` | Create and manage CloudFront VPC origins centrally, and share it with other AWS accounts or your organization. This lets multiple AWS accounts use a shared VPC origins for CloudFront distributions. For more information, see [Working with shared resources in CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/sharing-resources.html) in the _Amazon CloudFront Developer Guide_. | No | Yes Can share with **any** AWS account. | No | No + +## AWS CloudHSM + +You can share the following AWS CloudHSM resources by using AWS RAM. + +Resource type and code | Use case | Can share with IAM users and roles | Can share with accounts outside its organization | Can use customer managed permissions | Can share with service principals +---|---|---|---|---|--- +AWS CloudHSM Backups `cloudhsm:Backup` | Manage AWS CloudHSM Backups centrally, and share them with other AWS accounts or your organization. This lets multiple AWS accounts and users view information about the Backup and use it to restore a AWS CloudHSM Cluster. For more information, see [Managing AWS CloudHSM backups](https://docs.aws.amazon.com/cloudhsm/latest/userguide/manage-backups.html) in the _AWS CloudHSM User Guide_. | Yes | Yes | Yes | No @@ -396,8 +411,0 @@ Amazon VPC Lattice service network `vpc-lattice:ServiceNetwork` | Create and ma -## AWS Cloud WAN - -You can share the following AWS Cloud WAN resources by using AWS RAM. - -Resource type and code | Use case | Can share with IAM users and roles | Can share with accounts outside its organization | Can use customer managed permissions | Can share with service principals ----|---|---|---|---|--- -Core networks `networkmanager:CoreNetwork` | Create and manage a Cloud WAN core network centrally, and share it with other AWS accounts. This lets multiple AWS accounts access and provision hosts on a single Cloud WAN core network. For more information, see [Share a core network](https://docs.aws.amazon.com/vpc/latest/cloudwan/cloudwan-share-network.html) in the _AWS Cloud WAN User Guide_. | Yes | Yes Can share with **any** AWS account. | No | No -