Operation Description
-
The
GrantInstanceToTransitRouter
operation can be used to grant transit routers permissions on network instances that belong to other Alibaba Cloud accounts, including virtual private clouds (VPCs), virtual border routers (VBRs), IPsec-VPN connections, and Express Connect Router (ECRs).To grant transit routers permissions on Cloud Connect Network (CCN) instances, call the GrantInstanceToCbn operation.
-
Before you call
GrantInstanceToTransitRouter
, take note of the billing rules, permission limits, and prerequisites on permission management of transit routers. For more information, see Acquire permissions to connect to a network instance that belongs to another account. -
Before you grant a transit router permissions on a network instance, make sure that the following requirements are met:
The account to which the network instance belongs and the account to which the transit router belongs are of the same type.
The ID of the Alibaba Cloud account to which the transit router belongs is obtained.
The ID of the Cloud Enterprise Network (CEN) instance to which the Enterprise Edition transit router belongs is obtained.
Before you grant a transit router permissions on a VBR, contact your account manager to acquire permissions on the VBR.
Before you grant a transit router permissions on an IPsec-VPN connection, make sure that the IPsec-VPN connection is not associated with a resource.
If the IPsec-VPN connection is attached to a VPN gateway, the IPsec-VPN connection cannot be attached to transit routers within the same account or different accounts.
If the IPsec-VPN connection is attached to a transit router, detach the IPsec-VPN connection from the transit router. For more information, see Delete a network instance connection.
Quotas Info
Authorization Information
The following table shows the authorization information corresponding to this API, which can be used in the Action policy element to grant a RAM user or RAM role the permissions to call the API. Please use RAM to set up these permissions and refer to RAM documentation for more instructions.
Request Parameters
Field Name | Field Details |
---|---|
CenIdstring | Enter the ID of the Cloud Enterprise Network (CEN) instance to which the transit router belongs. Example:cen-44m0p68spvlrqq****Reference Value Source: CreateCen |
InstanceIdstring | The ID of the network instance. Example:vpc-bp1h8vbrbcgohcju5****Reference Value Source: DescribeCenAttachedChildInstances |
InstanceTypestring | The type of network instance. Valid values:View Details... Example:VPCReference Value Source: CreateCenChildInstanceRouteEntryToCen |
RegionIdstring | The ID of the region where the network instance is deployed.View Details... Example:cn-hangzhouReference Value Source: DescribeChildInstanceRegions |
CenOwnerIdinteger<int64> | The ID of the Alibaba Cloud account to which the CEN instance belongs. Notice
The field type is Long, and the precision may be lost during serialization/deserialization. Please note that the value must not be greater than 9007199254740991. Example:1250123456123456 |
OrderTypestring | The entity that pays the fees of the network instance. Valid values:View Details... Example:PayByCenOwnerEnumeration Value:PayByCenOwnerPayByResourceOwner |
Response Parameters
Field Name | Field Details |
---|---|
RequestIdstring | The ID of the request. Example:C6E5992C-A57B-5A6C-9B26-568074DC68BA |