Skip to content

Commit 39e810c

Browse files
author
awstools
committed
feat(client-global-accelerator): AWS Global Accelerator now supports cross-account sharing for bring your own IP addresses.
1 parent 4901f59 commit 39e810c

9 files changed

+163
-107
lines changed

‎clients/client-global-accelerator/src/commands/CreateCrossAccountAttachmentCommand.ts

Lines changed: 19 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -37,14 +37,23 @@ export interface CreateCrossAccountAttachmentCommandOutput
3737

3838
/**
3939
* <p>Create a cross-account attachment in Global Accelerator. You create a cross-account attachment to
40-
* specify the <i>principals</i> who have permission to add to accelerators in their own
41-
* account the resources in your account that you also list in the attachment.</p>
40+
* specify the <i>principals</i> who have permission to work with <i>resources</i>
41+
* in accelerators in their own account. You specify, in the same attachment, the resources that are shared.</p>
4242
* <p>A principal can be an Amazon Web Services account number or the Amazon Resource Name (ARN) for an
43-
* accelerator. For account numbers that are listed as principals, to add a resource listed in the attachment to an accelerator,
44-
* you must sign in to an account specified as a principal. Then you can add the resources that are listed
45-
* to any of your accelerators. If an accelerator ARN is listed in the cross-account attachment as a principal,
46-
* anyone with permission to make updates to the accelerator can add as endpoints resources that are listed in the
43+
* accelerator. For account numbers that are listed as principals, to work with a resource listed in the attachment,
44+
* you must sign in to an account specified as a principal. Then, you can work with resources that are listed,
45+
* with any of your accelerators. If an accelerator ARN is listed in the cross-account attachment as a principal,
46+
* anyone with permission to make updates to the accelerator can work with resources that are listed in the
4747
* attachment. </p>
48+
* <p>Specify each principal and resource separately. To specify two CIDR address pools, list
49+
* them individually under <code>Resources</code>, and so on. For a command line operation, for example,
50+
* you might use a statement like the following:</p>
51+
* <p>
52+
* <code> "Resources": [\{"Cidr": "169.254.60.0/24"\},\{"Cidr": "169.254.59.0/24"\}]</code>
53+
* </p>
54+
* <p>For more information, see <a href="https://docs.aws.amazon.com/global-accelerator/latest/dg/cross-account-resources.html">
55+
* Working with cross-account attachments and resources in Global Accelerator</a> in the <i>
56+
* Global Accelerator Developer Guide</i>.</p>
4857
* @example
4958
* Use a bare-bones client and the command you need to make an API call.
5059
* ```javascript
@@ -58,7 +67,8 @@ export interface CreateCrossAccountAttachmentCommandOutput
5867
* ],
5968
* Resources: [ // Resources
6069
* { // Resource
61-
* EndpointId: "STRING_VALUE", // required
70+
* EndpointId: "STRING_VALUE",
71+
* Cidr: "STRING_VALUE",
6272
* Region: "STRING_VALUE",
6373
* },
6474
* ],
@@ -81,7 +91,8 @@ export interface CreateCrossAccountAttachmentCommandOutput
8191
* // ],
8292
* // Resources: [ // Resources
8393
* // { // Resource
84-
* // EndpointId: "STRING_VALUE", // required
94+
* // EndpointId: "STRING_VALUE",
95+
* // Cidr: "STRING_VALUE",
8596
* // Region: "STRING_VALUE",
8697
* // },
8798
* // ],

‎clients/client-global-accelerator/src/commands/DeleteCrossAccountAttachmentCommand.ts

Lines changed: 4 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -36,22 +36,10 @@ export interface DeleteCrossAccountAttachmentCommandOutput extends __MetadataBea
3636
/**
3737
* <p>Delete a cross-account attachment. When you delete an attachment, Global Accelerator revokes the permission
3838
* to use the resources in the attachment from all principals in the list of principals. Global Accelerator
39-
* revokes the permission for specific resources by doing the following:</p>
40-
* <ul>
41-
* <li>
42-
* <p>If the principal is an account ID, Global Accelerator reviews every accelerator in the account
43-
* and removes cross-account endpoints from all accelerators.</p>
44-
* </li>
45-
* <li>
46-
* <p>If the principal is an accelerator, Global Accelerator reviews just that accelerator
47-
* and removes cross-account endpoints from it.</p>
48-
* </li>
49-
* </ul>
50-
* <p>If there are overlapping permissions provided by multiple cross-account attachments,
51-
* Global Accelerator only removes endpoints if there are no current cross-account attachments that provide
52-
* access permission. For example, if you delete a cross-account attachment that lists an
53-
* accelerator as a principal, but another cross-account attachment includes the account ID
54-
* that owns that accelerator, endpoints will not be removed from the accelerator.</p>
39+
* revokes the permission for specific resources.</p>
40+
* <p>For more information, see <a href="https://docs.aws.amazon.com/global-accelerator/latest/dg/cross-account-resources.html">
41+
* Working with cross-account attachments and resources in Global Accelerator</a> in the <i>
42+
* Global Accelerator Developer Guide</i>.</p>
5543
* @example
5644
* Use a bare-bones client and the command you need to make an API call.
5745
* ```javascript

‎clients/client-global-accelerator/src/commands/DescribeCrossAccountAttachmentCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,8 @@ export interface DescribeCrossAccountAttachmentCommandOutput
5757
* // ],
5858
* // Resources: [ // Resources
5959
* // { // Resource
60-
* // EndpointId: "STRING_VALUE", // required
60+
* // EndpointId: "STRING_VALUE",
61+
* // Cidr: "STRING_VALUE",
6162
* // Region: "STRING_VALUE",
6263
* // },
6364
* // ],

‎clients/client-global-accelerator/src/commands/ListCrossAccountAttachmentsCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,8 @@ export interface ListCrossAccountAttachmentsCommandOutput
5656
* // ],
5757
* // Resources: [ // Resources
5858
* // { // Resource
59-
* // EndpointId: "STRING_VALUE", // required
59+
* // EndpointId: "STRING_VALUE",
60+
* // Cidr: "STRING_VALUE",
6061
* // Region: "STRING_VALUE",
6162
* // },
6263
* // ],

‎clients/client-global-accelerator/src/commands/ListCrossAccountResourceAccountsCommand.ts

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,10 @@ export interface ListCrossAccountResourceAccountsCommandOutput
3636
__MetadataBearer {}
3737

3838
/**
39-
* <p>List the accounts that have cross-account endpoints.</p>
39+
* <p>List the accounts that have cross-account resources.</p>
40+
* <p>For more information, see <a href="https://docs.aws.amazon.com/global-accelerator/latest/dg/cross-account-resources.html">
41+
* Working with cross-account attachments and resources in Global Accelerator</a> in the <i>
42+
* Global Accelerator Developer Guide</i>.</p>
4043
* @example
4144
* Use a bare-bones client and the command you need to make an API call.
4245
* ```javascript

‎clients/client-global-accelerator/src/commands/ListCrossAccountResourcesCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ export interface ListCrossAccountResourcesCommandInput extends ListCrossAccountR
3131
export interface ListCrossAccountResourcesCommandOutput extends ListCrossAccountResourcesResponse, __MetadataBearer {}
3232

3333
/**
34-
* <p>List the cross-account endpoints available to add to an accelerator.</p>
34+
* <p>List the cross-account resources available to work with.</p>
3535
* @example
3636
* Use a bare-bones client and the command you need to make an API call.
3737
* ```javascript
@@ -50,6 +50,7 @@ export interface ListCrossAccountResourcesCommandOutput extends ListCrossAccount
5050
* // CrossAccountResources: [ // CrossAccountResources
5151
* // { // CrossAccountResource
5252
* // EndpointId: "STRING_VALUE",
53+
* // Cidr: "STRING_VALUE",
5354
* // AttachmentArn: "STRING_VALUE",
5455
* // },
5556
* // ],

‎clients/client-global-accelerator/src/commands/UpdateCrossAccountAttachmentCommand.ts

Lines changed: 10 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -38,22 +38,10 @@ export interface UpdateCrossAccountAttachmentCommandOutput
3838
/**
3939
* <p>Update a cross-account attachment to add or remove principals or resources. When you update
4040
* an attachment to remove a principal (account ID or accelerator) or a resource, Global Accelerator
41-
* revokes the permission for specific resources by doing the following:</p>
42-
* <ul>
43-
* <li>
44-
* <p>If the principal is an account ID, Global Accelerator reviews every accelerator in the account
45-
* and removes cross-account endpoints from all accelerators.</p>
46-
* </li>
47-
* <li>
48-
* <p>If the principal is an accelerator, Global Accelerator reviews just that accelerator
49-
* and removes cross-account endpoints from it.</p>
50-
* </li>
51-
* </ul>
52-
* <p>If there are overlapping permissions provided by multiple cross-account attachments,
53-
* Global Accelerator only removes endpoints if there are no current cross-account attachments that provide
54-
* access permission. For example, if you delete a cross-account attachment that lists an
55-
* accelerator as a principal, but another cross-account attachment includes the account ID
56-
* that owns that accelerator, endpoints will not be removed from the accelerator.</p>
41+
* revokes the permission for specific resources. </p>
42+
* <p>For more information, see <a href="https://docs.aws.amazon.com/global-accelerator/latest/dg/cross-account-resources.html">
43+
* Working with cross-account attachments and resources in Global Accelerator</a> in the <i>
44+
* Global Accelerator Developer Guide</i>.</p>
5745
* @example
5846
* Use a bare-bones client and the command you need to make an API call.
5947
* ```javascript
@@ -71,13 +59,15 @@ export interface UpdateCrossAccountAttachmentCommandOutput
7159
* ],
7260
* AddResources: [ // Resources
7361
* { // Resource
74-
* EndpointId: "STRING_VALUE", // required
62+
* EndpointId: "STRING_VALUE",
63+
* Cidr: "STRING_VALUE",
7564
* Region: "STRING_VALUE",
7665
* },
7766
* ],
7867
* RemoveResources: [
7968
* {
80-
* EndpointId: "STRING_VALUE", // required
69+
* EndpointId: "STRING_VALUE",
70+
* Cidr: "STRING_VALUE",
8171
* Region: "STRING_VALUE",
8272
* },
8373
* ],
@@ -93,7 +83,8 @@ export interface UpdateCrossAccountAttachmentCommandOutput
9383
* // ],
9484
* // Resources: [ // Resources
9585
* // { // Resource
96-
* // EndpointId: "STRING_VALUE", // required
86+
* // EndpointId: "STRING_VALUE",
87+
* // Cidr: "STRING_VALUE",
9788
* // Region: "STRING_VALUE",
9889
* // },
9990
* // ],

0 commit comments

Comments
 (0)