This topic describes how you can grant the permissions of your VPCs, VBRs, and CCNs to other accounts. By doing so, you allow the owners of the authorized accounts to attach your networks to their CEN instances.

Prerequisites

Before you grant permissions to another account, you must obtain the following information of that account:
  • The ID of the CEN instance.
  • The user ID of the account to which the CEN instance belongs.

VPC authorization

In this procedure, user A grants permissions of a VPC instance under account A to a CEN instance under account B. After the authorization, the VPC under account A can be attached to the CEN instance under account B.

Notice If the authorization is successful, user B can attach networks under account A to the CEN instances under account B and communication will be enabled among the networks under account A and account B. Use caution when performing cross-account authorization.
  1. Log on to VPC console with account A.
  2. In the top navigation bar, select the region of the VPC.
  3. On the VPCs page, find the target VPC, and click Manage in the Actions column.
  4. In the Authorization for Cross Account CEN Attachment section, click Authorize Cross Account Attach CEN.
  5. In the Attach to CEN dialog box, enter the account ID of account B and the ID of the CEN under account B, and then click OK.
    Cross Account CEN
  6. Take note of the VPC ID and the account ID of account A. You can view the account ID on the Account Management page.

VBR authorization

In this procedure, user A grants permissions of a VBR instance under account A to a CEN instance under account B. After obtaining the permissions, user B can attach the VBR under account A to the CEN instance under account B.
Notice
  • Beginning November 1, 2019, the CEN function of cross-account attaching of VBR instances will be disabled by default. If you need to use this function, open a ticket,
  • If the authorization is successful, user B can attach networks under account A to the CEN instances under account B and communication will be enabled among the networks under account A and account B. Use caution when performing cross-account authorization.
  1. Log on to the Express Connect console with account A.
  2. In the left-side navigation pane, choose Virtual Border Routers (VBRs) > Virtual Border Routers (VBRs).
  3. In the top navigation bar, select the region of the VBR.
  4. On the Virtual Border Routers (VBRs) page, find the target VBR and click the VBR ID.
  5. Click the CEN Authorization tab, and then click Authorize CEN of Another Account to Load Instance.
  6. In the Authorize CEN of Another Account to Load Instance dialog box, enter the ID of the target CEN instance under account B and the account ID of account B, and click OK.
  7. Take note of the VBR ID and the account ID of account A. You can view the account ID on the Account Management page.

CCN authorization

In this procedure, user A grants permissions of a CCN instance under account A to a CEN instance under account B. After obtaining the permissions, user B can attach the CCN under account A to the CEN instance under account B.

Notice If the authorization is successful, user B can attach networks under account A to the CEN instances under account B and communication will be enabled among the networks under account A and account B. Use caution when performing cross-account authorization.
  1. Log on to the Smart Access Gateway console with account A.
  2. In the left-side navigation pane, click CCN, find the target CCN, and click the instance ID of the CCN.
  3. Click CEN Cross Account Authorization, enter the ID of the target CEN instance under account B and the account ID of account B, and click OK.
    CEN to cros CCN
  4. Take note of the VBR ID and the account ID of account A. You can view the account ID on the Account Management page.

What to do next

Attach networks