Updated on 2025-04-16 GMT+08:00

Cross-Account Authorization Overview

Cross-Account Authorization

Cross-account authorization allows an account (account A) to authorize another account (account B) to use its cloud service resources. Even if account A does not allow access to a specific cloud service, account B can still use the cloud service resources that have been authorized by account A. For example, you can share the resources through Random Access Memory (RAM) or access the resources through cross-account authorization. This authorization mechanism allows different accounts to share and collaborate on using cloud resources while maintaining independence and security.

Constraints on Cross-Account Authorization

  • You can share your network instances with other accounts, or have them share theirs with you.
  • Only VPCs can be authorized. A VPC can only be loaded to one cloud connection.