AWS odb: Update sharing task steps for Exascale storage vault
Summary
Updates the AWS RAM resource-sharing procedure to include the Exascale storage vault resource type, the AWSRAMDefaultPermissionODBExascaleDbStorageVault managed permission, and CLI guidance for specifying the vault ARN.
Security assessment
The diff adds procedural steps for sharing a new resource type and references the AWS RAM managed permission used to grant access, which is security-relevant configuration guidance but not a fix for a specific weakness.
Evidence
+ * **AWSRAMDefaultPermissionODBExascaleDbStorageVault**
Diff
diff --git a/odb/latest/UserGuide/sharing-resources-task.md b/odb/latest/UserGuide/sharing-resources-task.md index f022cfd92..c8ea8a8db 100644 --- a//odb/latest/UserGuide/sharing-resources-task.md +++ b//odb/latest/UserGuide/sharing-resources-task.md @@ -45 +45 @@ Before you share Oracle Database@AWS resources, make sure that you have the foll -To share an Exadata infrastructure or ODB network with another AWS account, you create a resource share using AWS RAM. This allows the trusted account to create VM clusters on your Exadata infrastructure. +To share an Exadata infrastructure, ODB network, or Exascale storage vault with another AWS account, you create a resource share using AWS RAM. This allows the trusted account to create VM clusters on your Exadata infrastructure. @@ -53 +53 @@ To share an Exadata infrastructure or ODB network with another AWS account, you - 4. Under **Select resource type** , choose either of the following resources: + 4. Under **Select resource type** , choose one of the following resources: @@ -59 +59,3 @@ To share an Exadata infrastructure or ODB network with another AWS account, you - 5. Select the Exadata infrastructure resources you want to share. Choose Next until you get to **Grant access to principals**. + * **Oracle Database@AWS Exascale storage vault** + + 5. Select the resources you want to share. Choose Next until you get to **Grant access to principals**. @@ -68,0 +71,2 @@ To share an Exadata infrastructure or ODB network with another AWS account, you + * **AWSRAMDefaultPermissionODBExascaleDbStorageVault** + @@ -81,0 +86,2 @@ To share resources using the AWS CLI, use the `aws ram create-resource-share` co +To share an ODB network or Exascale storage vault instead, specify its ARN for the `--resource-arns` parameter. +