The cross-account VPC association feature extends a private zone's effective scope to VPCs in other Alibaba Cloud accounts, enabling centralized DNS management without duplicating zones.
Prerequisites
-
Log on to the console with an Alibaba Cloud account or a Resource Access Management (RAM) user that has the AliyunDNSFullAccess permission.
-
You have created a User Defined Zones.
-
You have the email address or username of the destination Alibaba Cloud account, which must have at least one VPC available.
Limits
Note the following limits:
-
Destination account type: Only root account credentials (email or username) are supported. RAM user credentials cannot be used.
-
Site restrictions: Only accounts on the same site can be associated. For example, China site accounts with each other, or International site accounts with each other. Cross-site association is not supported.
-
VPC read delay: VPCs from an associated account are not synced in real time. After you add an account, wait approximately one hour for its VPCs to become available.
-
Billing: The zone owner account is billed for DNS resolution. Product billing.
Procedure
To associate a VPC from another account, first add the linked account, then select its VPC when configuring the effective scope.
Step 1: Add a linked account
-
Go to the Alibaba Cloud DNS - PrivateZone page.
-
Click Open Service Guide.

-
In the guide panel, click Unified Management of Private Zone.

-
In the dialog box that appears on the right, click Add Alibaba Cloud Account.

-
In the dialog box, configure the following parameters:
Field
Description
Alibaba Cloud Account (Email/Username)
Enter the email or username of the destination root account. Do not enter the account UID. RAM users are not supported.
Verification Code

Click Send Verification Code. A verification code is sent to the email and phone number of the destination account. Enter the code to verify ownership.
-
After verification, the account appears in the table with its UID and timestamp. Repeat these steps to add more accounts.
Step 2: Configure the effective scope
-
On the Private Zone (Compatible with on-premises DNS) page, click the Private Zone tab, and then select User Defined Zones.
-
On the User Defined Zones page, click Effective Scope in the Actions column of the target domain name.

-
On the Effective Scope page, find the Effective in VPCs section. Select the VPC from the linked account and click Submit.
NoteVPCs in a linked account are not synced in real time. If the VPC is not listed, wait about an hour and retry.