

# Sharing a DNS view that you own
<a name="gr-sharing-dns-views-share"></a>

To share a DNS view, you create a resource share in AWS RAM. A resource share specifies the resources to share, the managed permission to apply, and the principals (accounts, organizational units, or organization) to share with.

You can share a DNS view only if you own it. You can't share a DNS view that was shared with you.
+ [Console](#gr-sharing-dns-views-share-console)
+ [CLI](#gr-sharing-dns-views-share-cli)

## Sharing a DNS view (console)
<a name="gr-sharing-dns-views-share-console"></a>

**To share a DNS view with another AWS account**

1. Open the AWS RAM console at [https://console.aws.amazon.com/ram/](https://console.aws.amazon.com/ram/).
**Note**  
A DNS view is a global resource. You must create the resource share in the US East (N. Virginia) (`us-east-1`) Region.

1. Choose **Create resource share**.

1. For **Name**, enter a descriptive name for the resource share.

1. Under **Resources**, choose the **Route 53 Global Resolver DNS Views** resource type, and then select the DNS view that you want to share.

1. For **Managed permissions**, choose the permission that grants the access you want. For more information, see the *Permissions that the owner grants to the consumer* list earlier in this topic.

1. For **Principals**, enter the AWS account ID, OU, or organization to share the DNS view with, and then choose **Add**.

1. Choose **Create resource share**.

If you share the DNS view with an account outside your organization in AWS Organizations, the consumer gets an invitation to the resource share. The consumer must accept the invitation before it can use the shared DNS view.

## Sharing a DNS view (CLI)
<a name="gr-sharing-dns-views-share-cli"></a>

To share a DNS view, use the AWS RAM `create-resource-share` command. Specify the ARN of the DNS view and the consumer account. Run the command in the US East (N. Virginia) (`us-east-1`) Region. The following example shares a DNS view with the account `222233334444` using the default managed permission.

`aws ram create-resource-share --region us-east-1 --name MyDNSViewShare --resource-arns arn:aws:route53globalresolver::111122223333:dns-view/dnsv-abcdef1234567890 --principals 222233334444`

To grant more access, include the `--permission-arns` parameter with the ARN of the `AWSRAMPermissionDNSViewLifecycleManagement` or `AWSRAMPermissionDNSViewFullAccess` managed permission. To find a permission's ARN, use the AWS RAM `list-permissions` command.