A shared VPC allows multiple Alibaba Cloud accounts to create cloud resources within a centrally managed shared VPC. This enables resources in different accounts to communicate with each other over the VPC. For example, Account A can access a Container Registry Enterprise Edition instance that belongs to Account B over the shared VPC.
Prerequisites
-
For Account A, activate Alibaba Cloud DNS PrivateZone, and grant Container Registry permissions to access Alibaba Cloud DNS PrivateZone by clicking Quick Authorize.
NoteYou are charged for using Alibaba Cloud DNS PrivateZone. For billing details, see Pricing.
-
Create a Container Registry Enterprise Edition instance for Account B. For more information, see Create a Container Registry Enterprise Edition instance.
-
Share the VPC of Account A with Account B. For more information, see Enable VPC sharing as a resource owner.
Limitations
Before using a shared VPC to access an ACR Enterprise Edition instance across accounts, review the limitations in Shared VPC.
Step 1: Configure cross-account VPC access for the ACR instance
Log on to the Container Registry console as Account B.
-
Log on to the Container Registry console.
In the top navigation bar, select a region.
In the left-side navigation pane, click Instances.
On the Instances page, click the Enterprise Edition instance that you want to manage.
-
In the left navigation pane, choose .
-
On the Access Control page, click Add VPC .
-
In the Add VPC dialog box, select the VPC and vSwitch that belong to Account A. Click Confirm.
Wait until the Status changes to Running.
Related documents
For more information about shared VPCs, see Shared VPC.