Alibaba Cloud DNS:Associate VPCs across accounts

Prerequisites

1. Log on to the console with an Alibaba Cloud account or a Resource Access Management (RAM) user that has the AliyunDNSFullAccess permission.

2. You have created a user defined zone.

3. You have the email address or username of the destination Alibaba Cloud account, which must have at least one VPC available.

Limits

Note the following limits:

• Destination account type: You must obtain the information of the destination root account (email or username). RAM user information cannot be used.

• Site restrictions: Only accounts on the same site can be associated. For example, China site accounts with each other, or International site accounts with each other. Cross-site association is not supported.

• VPC read delay: VPCs from an associated account are not synced in real time. After you add an account, wait approximately one hour for its VPCs to become available.

• Billing: The zone owner account is billed for DNS resolution. Product billing.

Procedure

To associate a VPC from another account, first add the linked account, then select its VPC when configuring the effective scope.

Step 1: Add a linked account

1. Go to the Alibaba Cloud DNS - Private Zone page.

2. Click Open Service Guide.

3. In the guide panel, click Unified Management of Private Zone.

4. In the dialog box that appears on the right, click Add Alibaba Cloud Account.

5. In the dialog box, configure the following parameters:

   Field	Description
   Alibaba Cloud Account (Email/Username)	Enter the email or username of the destination root account. Do not enter the account UID. RAM users are not supported.
   Verification Code	Click Send Verification Code. A verification code is sent to the email, phone number, or Message Center of the destination account. Enter the code to verify ownership.

6. After verification, the account appears in the table with its UID and timestamp. Repeat these steps to add more accounts.

Step 2: Configure the effective scope

1. On the Private Zone (Compatible with on-premises DNS) page, click the Private Zone tab, and then select User Defined Zones.

2. On the User Defined Zones page, click Effective Scope in the Actions column of the target domain name.

3. On the Effective Scope page, find the Effective in VPCs section. Select the VPC from the linked account and click Submit.

   Note

   VPCs in a linked account are not synced in real time. If the VPC is not listed, wait about an hour and retry.