AWS::RAM::PermissionAssociation

RAM PermissionAssociation

Associates a specified AWS RAM permission with a resource share. You can only associate one permission with each resource type in a resource share.

Properties

3 configurable properties. 2 required. Click a row to see details.

Filter:

Property	Type	Flags
`PermissionArn`	`string`	RequiredCreate-only
`ResourceShareArn`	`string`	RequiredCreate-only
`Replace`	`boolean`	Write-only

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`AssociationStatus`	`string`	The current status of the association between the permission and the resource share.
`FeatureSet`	`string`	The feature set of the resource share.
`IsDefault`	`boolean`	Indicates whether the associated resource share is using the default version of the permission.
`LastUpdatedTime`	`string`	The date and time when the association between the permission and the resource share was last updated.
`PermissionVersion`	`string`	The version of the permission currently associated with the resource share.
`ResourceType`	`string`	The resource type to which the permission applies.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::RAM::PermissionAssociation

Resources:
  MyResource:
    Type: AWS::RAM::PermissionAssociation
    Properties:
      PermissionArn: "arn:aws:service:region:account:resource"
      ResourceShareArn: "arn:aws:service:region:account:resource"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

read

ram:ListPermissionAssociations

create

ram:AssociateResourceSharePermissionram:GetPermissionram:GetResourceSharesram:ListPermissionAssociations

update

ram:AssociateResourceSharePermissionram:GetPermissionram:GetResourceSharesram:ListPermissionAssociations

list

ram:ListPermissionAssociations

delete

ram:DisassociateResourceSharePermissionram:ListPermissionAssociations

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

ServiceRAM

Properties9

Required2

TaggingNot supported

Primary IDResourceShareArn

Supported Operations

ReadCreateUpdateListDelete

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

ResourceShareArnPermissionArn

Related Resources

External Links

AWS Documentation