ram:CreateResourceShare is a Write access-level action in the ram service. Grants permission to create a resource share with provided resource(s) and/or principal(s)
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants ram:CreateResourceShare.
Filters access by the tags that are passed in the request when creating or tagging a resource share. If users don't pass these specific tags, or if they don't specify tags at all, the request fails
Filters access by the tag keys that are passed when creating or tagging a resource share
Filters access by resource shares that allow or deny sharing with external principals. For example, specify true if the action can only be performed on resource shares that allow sharing with external principals. External principals are AWS accounts that are outside of its AWS organization
Filters access by format of the specified principal
Filters access by the specified value for 'allowExternalPrincipals'. External principals are AWS accounts that are outside of its AWS Organization
Filters access by the specified resource type
Filters access by the specified ARN
Filters access by RetainSharingOnAccountLeaveOrganization value within ResourceShareConfiguration that is set on resource share
A minimal policy that allows ram:CreateResourceShare. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamCreateResourceShare",
"Effect": "Allow",
"Action": "ram:CreateResourceShare",
"Resource": "*"
}
]
}