All Products
Search
Document Center

Alibaba Cloud DNS:Associate VPCs across accounts

Last Updated:Jun 04, 2026

The cross-account VPC association feature extends a private zone's effective scope to VPCs in other Alibaba Cloud accounts, enabling centralized DNS management without duplicating zones.

Prerequisites

  1. Log on to the console with an Alibaba Cloud account or a Resource Access Management (RAM) user that has the AliyunDNSFullAccess permission.

  2. You have created a User Defined Zones.

  3. You have the email address or username of the destination Alibaba Cloud account, which must have at least one VPC available.

Limits

Note the following limits:

  • Destination account type: Only root account credentials (email or username) are supported. RAM user credentials cannot be used.

  • Site restrictions: Only accounts on the same site can be associated. For example, China site accounts with each other, or International site accounts with each other. Cross-site association is not supported.

  • VPC read delay: VPCs from an associated account are not synced in real time. After you add an account, wait approximately one hour for its VPCs to become available.

  • Billing: The zone owner account is billed for DNS resolution. Product billing.

Procedure

To associate a VPC from another account, first add the linked account, then select its VPC when configuring the effective scope.

Step 1: Add a linked account

  1. Go to the Alibaba Cloud DNS - PrivateZone page.

  2. Click Open Service Guide.

    image

  3. In the guide panel, click Unified Management of Private Zone.image

  4. In the dialog box that appears on the right, click Add Alibaba Cloud Account.

    image

  5. In the dialog box, configure the following parameters:

    Field

    Description

    Alibaba Cloud Account (Email/Username)

    Enter the email or username of the destination root account. Do not enter the account UID. RAM users are not supported.

    Verification Code

    image

    Click Send Verification Code. A verification code is sent to the email and phone number of the destination account. Enter the code to verify ownership.

  6. After verification, the account appears in the table with its UID and timestamp. Repeat these steps to add more accounts.

Step 2: Configure the effective scope

  1. On the Private Zone (Compatible with on-premises DNS) page, click the Private Zone tab, and then select User Defined Zones.

  2. On the User Defined Zones page, click Effective Scope in the Actions column of the target domain name.

    image

  3. On the Effective Scope page, find the Effective in VPCs section. Select the VPC from the linked account and click Submit.

    Note

    VPCs in a linked account are not synced in real time. If the VPC is not listed, wait about an hour and retry.