ds:ShareDirectory

Write

ds:ShareDirectory is a Write access-level action in the ds service. Grants permission to share a specified directory in your AWS account (directory owner) with another AWS account (directory consumer). With this operation you can use your directory from any AWS account and from any Amazon VPC within an AWS Region

Resource types

ARNs that ds:ShareDirectory can be scoped to in an IAM policy.

arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}

Condition keys

Keys you can use in the Condition block of a policy that grants ds:ShareDirectory.

aws:ResourceTag/${TagKey} String

Filters access by the AWS DS Resource being acted upon

Example IAM policy

A minimal policy that allows ds:ShareDirectory. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowDsShareDirectory",
      "Effect": "Allow",
      "Action": "ds:ShareDirectory",
      "Resource": "*"
    }
  ]
}

Related actions in ds

ds:AcceptSharedDirectory Write ds:AccessDSData Permissions management ds:AddIpRoutes Write ds:AddRegion Write ds:AddTagsToResource Tagging ds:AuthorizeApplication Write ds:CancelSchemaExtension Write ds:CheckAlias Read ds:ConnectDirectory Write ds:CreateAlias Write ds:CreateComputer Write ds:CreateConditionalForwarder Write

View all ds actions →