Virtual Private Cloud:Shared VPC

Step 1: Enable sharing

This section describes how to share a vSwitch with any account. To share resources only within a resource directory, see Share resources only within a resource directory.

1. Log on to the vSwitch owner's Alibaba Cloud account and navigate to the Resource Sharing > Resources I Share page in the Resource Management console. In the top navigation bar, select the region where the resource is located, and click Create Resource Share. On the page that appears, perform the following steps:

   Step 1: Enter a Resource Share Name and select the vSwitch that you want to share.

   Step 2: The system selects the AliyunRSDefaultPermissionVSwitch permission by default.

   Step 3: In the Principal Scope section, select All Accounts. For Method, select Add Manually. Enter the Alibaba Cloud account ID of the vSwitch participant, and then click Add.

   Step 4: Review the configuration and click Confirm.

2. Log on to the vSwitch participant's account to accept the sharing invitation:

   1. Go to the Resource Sharing > Resources Shared with Me page in the Resource Management console.

   2. In the top navigation bar, select the region where the shared resource is located. Find the target resource share and click Accept in the Status column.

   3. After you accept the invitation, you can access the shared vSwitch. Any new resources added to this resource share are accepted automatically.

Step 2: Create a cloud resource

Log on to the vSwitch participant's account:

1. Go to the vSwitches page in the VPC console. In the top navigation bar, select the region of the shared vSwitch. You can then see the shared vSwitch, which is marked as "from sharing".

2. To create an ECS, ApsaraDB for RDS, or SLB instance, find the target shared vSwitch and click Add Cloud Service in the Actions column.

3. For other supported cloud resource types, select the shared vSwitch when you create the resource.

Step 1: Enable sharing

• Method 1: Share with any account

  1. Use the credentials of the vSwitch owner to call the CreateResourceShare operation to create a resource share. Make sure to set the AllowExternalTargets parameter to True.

  2. Use the credentials of the vSwitch participant to call the ListResourceShareInvitations operation to query received invitations, and then call the AcceptResourceShareInvitation operation to accept an invitation.

• Method 2: Share only within a resource directory

  1. Use the credentials of the management account of the resource directory to call the EnableSharingWithResourceDirectory operation to enable sharing within the resource directory.

  2. Use the credentials of the vSwitch owner to call the CreateResourceShare operation to create a resource share. Make sure to set the AllowExternalTargets parameter to False.

Step 2: Create a cloud resource

Log on to the vSwitch participant's account and perform the following steps:

1. Call the DescribeVSwitches operation to obtain a list of vSwitches.

2. From the list, filter for shared vSwitches where the ShareType parameter is Sharing.

3. Call the API operation to create the desired cloud resource, such as RunInstances for an ECS instance. In the request, specify the shared vSwitch.

Step 1: Enable sharing

A vSwitch owner creates a resource share:

Terraform currently supports sharing only within a resource directory. Before you proceed, make sure that the management account of the resource directory has enabled sharing for the resource directory.

Resources: alicloud_resource_manager_resource_share, alicloud_resource_manager_shared_resource, and alicloud_resource_manager_shared_target

# Specify the region.
provider "alicloud" {
  region = "cn-hangzhou"
}

# Specify the resource share name.
resource "alicloud_resource_manager_resource_share" "example_unit" {
  resource_share_name = "example_unit_name"
}

# Specify the vSwitch to share.
resource "alicloud_resource_manager_shared_resource" "example_vsw" {
  resource_share_id = alicloud_resource_manager_resource_share.example_unit.id
  resource_id       = "vsw-bp1omg98fixldnwcxxxxx" # Replace with the actual ID of the shared vSwitch.
  resource_type     = "VSwitch"                   # The resource type is VSwitch. 
}

# Specify the participant of the shared vSwitch.
resource "alicloud_resource_manager_shared_target" "example_target" {
  resource_share_id = alicloud_resource_manager_resource_share.example_unit.id
  target_id         = "10xxxxxxxxxxxxxx" # Replace with the actual UID of the vSwitch participant.
}

Step 2: Create a cloud resource

The following example shows how a vSwitch participant creates an ECS instance in a shared vSwitch:

Resources: alicloud_security_group and alicloud_instance

Data Sources: alicloud_vswitches

# Specify the region.
provider "alicloud" {
  region = "cn-hangzhou"
}

# Specify the shared vSwitch.
variable "vsw_id" {
  default = "vsw-bp1omg98fixldnwcxxxxx" # Replace with the actual ID of the shared vSwitch.
}

# Obtain information about the target shared vSwitch.
data "alicloud_vswitches" "example_vsw" {
  ids = [var.vsw_id]  
}

# Create a security group.
resource "alicloud_security_group" "example_sg" {
  security_group_name = "example_sg_name"
  vpc_id              = data.alicloud_vswitches.example_vsw.vswitches[0].vpc_id
}

# Create an ECS instance.
resource "alicloud_instance" "example_ecs" {
  instance_name        = "example_ecs_name"
  instance_type        = "ecs.e-c1m1.large"
  security_groups      = [alicloud_security_group.example_sg.id]
  vswitch_id           = var.vsw_id
  image_id             = "aliyun_3_x64_20G_alibase_20250117.vhd"
  system_disk_category = "cloud_essd"
}