本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
# AWS RAM 使用 的範例 AWS CLI
下列程式碼範例示範如何使用 AWS Command Line Interface 搭配 來執行動作和實作常見案例 AWS RAM。
*Actions* 是大型程式的程式碼摘錄，必須在內容中執行。雖然動作會告訴您如何呼叫個別服務函數，但您可以在其相關情境中查看內容中的動作。
每個範例均包含完整原始碼的連結，您可在連結中找到如何設定和執行內容中程式碼的相關指示。
**Topics**
+ [動作](#actions)
## 動作
### `accept-resource-share-invitation`
以下程式碼範例顯示如何使用 `accept-resource-share-invitation`。
**AWS CLI**
**接受資源共享的邀請**
下列 `accept-resource-share-invitation` 範例會接受指定的資源共享邀請。受邀帳戶中的主體可以立即開始使用共享中的資源。
```
aws ram accept-resource-share-invitation \
--resource-share-invitation-arn arn:aws:ram:us-west-2:111111111111:resource-share-invitation/1e3477be-4a95-46b4-bbe0-c4001EXAMPLE
```
輸出：
```
{
"resourceShareInvitation": {
"resourceShareInvitationArn": "arn:aws:ram:us-west-2:111111111111:resource-share-invitation/1e3477be-4a95-46b4-bbe0-c4001EXAMPLE",
"resourceShareName": "MyLicenseShare",
"resourceShareArn": "arn:aws:ram:us-west-2:111111111111:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE",
"senderAccountId": "111111111111",
"receiverAccountId": "222222222222",
"invitationTimestamp": "2021-09-22T15:07:35.620000-07:00",
"status": "ACCEPTED"
}
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [AcceptResourceShareInvitation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/accept-resource-share-invitation.html)。
### `associate-resource-share-permission`
以下程式碼範例顯示如何使用 `associate-resource-share-permission`。
**AWS CLI**
**建立 RAM 受管許可與資源共享的關聯**
下列 `associate-resource-share-permission` 範例會將相關資源類型的現有受管許可取代為指定的受管許可。對相關資源類型之所有資源的存取由新的許可管理。
```
aws ram associate-resource-share-permission \
--permission-arn arn:aws:ram::aws:permission/AWSRAMPermissionGlueDatabaseReadWrite \
--replace \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE
```
輸出：
```
{
"returnValue": true
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [AssociateResourceSharePermission](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/associate-resource-share-permission.html)。
### `associate-resource-share`
以下程式碼範例顯示如何使用 `associate-resource-share`。
**AWS CLI**
**範例 1：將資源與資源共享建立關聯**
下列 `associate-resource-share` 範例會將授權組態新增至指定的資源共享。
```
aws ram associate-resource-share \
--resource-share arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE \
--resource-arns arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-36be0485f5ae379cc74cf8e92EXAMPLE
```
輸出：
```
{
"resourceShareAssociations": [
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE",
"associatedEntity": "arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-36be0485f5ae379cc74cf8e92EXAMPLE",
"associationType": "RESOURCE",
"status": "ASSOCIATING",
"external": false
}
]
}
```
**範例 2：將主體與資源共享建立關聯**
下列 `associate-resource-share` 範例會將指定資源共享的存取權授予指定組織單位中的所有帳戶。
```
aws ram associate-resource-share \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE \
--principals arn:aws:organizations::123456789012:ou/o-63bEXAMPLE/ou-46xi-rEXAMPLE
```
輸出：
```
{
"resourceShareAssociations": [
{
"status": "ASSOCIATING",
"associationType": "PRINCIPAL",
"associatedEntity": "arn:aws:organizations::123456789012:ou/o-63bEXAMPLE/ou-46xi-rEXAMPLE",
"external": false,
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE"
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [AssociateResourceShare](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/associate-resource-share.html)。
### `create-resource-share`
以下程式碼範例顯示如何使用 `create-resource-share`。
**AWS CLI**
**範例 1：建立資源共享**
下列 `create-resource-share` 範例會建立具有指定名稱的空資源共享。您必須分別將資源、主體和許可新增至共享。
```
aws ram create-resource-share \
--name MyNewResourceShare
```
輸出：
```
{
"resourceShare": {
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/4476c27d-8feb-4b21-afe9-7de23EXAMPLE",
"name": "MyNewResourceShare",
"owningAccountId": "123456789012",
"allowExternalPrincipals": true,
"status": "ACTIVE",
"creationTime": 1634586271.302,
"lastUpdatedTime": 1634586271.302
}
}
```
**範例 2：以委託人身分與 AWS 帳戶建立資源共享**
下列`create-resource-share`範例會建立資源共享，並授予指定 AWS 帳戶 (222222222222) 的存取權。如果指定的委託人不屬於相同的 AWS 組織，則會傳送邀請，且必須先接受才能授予存取權。
```
aws ram create-resource-share \
--name MyNewResourceShare \
--principals 222222222222
```
**範例 3：建立僅限您 AWS Organization 的資源共用**
以下`create-resource-share`範例建立的資源共享僅限於您帳戶所屬 AWS 組織的帳戶，並將指定的 OU 新增為委託人。該 OU 中的所有帳戶都可以使用資源共享中的資源。
```
aws ram create-resource-share \
--name MyNewResourceShare \
--no-allow-external-principals \
--principals arn:aws:organizations::123456789012:ou/o-63bEXAMPLE/ou-46xi-rEXAMPLE
```
輸出：
```
{
"resourceShare": {
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7be8694e-095c-41ca-9ce8-7be4aEXAMPLE",
"name": "MyNewResourceShare",
"owningAccountId": "123456789012",
"allowExternalPrincipals": false,
"status": "ACTIVE",
"creationTime": 1634587042.49,
"lastUpdatedTime": 1634587042.49
}
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [CreateResourceShare](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/create-resource-share.html)。
### `delete-resource-share`
以下程式碼範例顯示如何使用 `delete-resource-share`。
**AWS CLI**
**刪除資源共享**
下列 `delete-resource-share` 範例會刪除指定的資源共享。
```
aws ram delete-resource-share \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
以下輸出表示成功：
```
{
"returnValue": true
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [DeleteResourceShare](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/delete-resource-share.html)。
### `disassociate-resource-share-permission`
以下程式碼範例顯示如何使用 `disassociate-resource-share-permission`。
**AWS CLI**
**從資源共享中移除資源類型的 RAM 受管許可**
下列 `disassociate-resource-share-permission` 範例會從指定的資源共享中移除 Glue 資料庫的 RAM 受管許可。
```
aws ram disassociate-resource-share-permission \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE \
--permission-arn arn:aws:ram::aws:permission/AWSRAMPermissionGlueDatabaseReadWrite
```
輸出：
```
{
"returnValue": true
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [DisassociateResourceSharePermission](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/disassociate-resource-share-permission.html)。
### `disassociate-resource-share`
以下程式碼範例顯示如何使用 `disassociate-resource-share`。
**AWS CLI**
**從資源共享中移除資源**
下列 `disassociate-resource-share` 範例會從指定的資源共享中移除指定的資源，在本案例中為 VPC 子網路。任何有權存取資源共享的主體都無法再對該資源執行操作。
```
aws ram disassociate-resource-share \
--resource-arns arn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1fEXAMPLE \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
輸出：
```
{
"resourceShareAssociations": [
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"associatedEntity": "arn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1fEXAMPLE",
"associationType": "RESOURCE",
"status": "DISASSOCIATING",
"external": false
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [DisassociateResourceShare](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/disassociate-resource-share.html)。
### `enable-sharing-with-aws-organization`
以下程式碼範例顯示如何使用 `enable-sharing-with-aws-organization`。
**AWS CLI**
**啟用跨 AWS Organizations 的資源共用**
下列 `enable-sharing-with-aws-organization` 範例可讓您跨組織和組織單位進行資源共享。
```
aws ram enable-sharing-with-aws-organization
```
以下輸出表示成功。
```
{
"returnValue": true
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [EnableSharingWithAwsOrganization](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/enable-sharing-with-aws-organization.html)。
### `get-permission`
以下程式碼範例顯示如何使用 `get-permission`。
**AWS CLI**
**擷取 RAM 受管許可的詳細資訊**
下列 `get-permission` 範例顯示指定 RAM 受管許可預設版本的詳細資訊。
```
aws ram get-permission \
--permission-arn arn:aws:ram::aws:permission/AWSRAMPermissionGlueTableReadWriteForDatabase
```
輸出：
```
{
"permission": {
"arn": "arn:aws:ram::aws:permission/AWSRAMPermissionGlueTableReadWriteForDatabase",
"version": "2",
"defaultVersion": true,
"name": "AWSRAMPermissionGlueTableReadWriteForDatabase",
"resourceType": "glue:Database",
"permission": "{\"Effect\":\"Allow\",\"Action\":[\"glue:GetTable\", \"glue:UpdateTable\", \"glue:DeleteTable\", \"glue:BatchDeleteTable\", \"glue:BatchDeleteTableVersion\", \"glue:GetTableVersion\", \"glue:GetTableVersions\", \"glue:GetPartition\", \"glue:GetPartitions\", \"glue:BatchGetPartition\", \"glue:BatchCreatePartition\", \"glue:CreatePartition\", \"glue:UpdatePartition\", \"glue:BatchDeletePartition\", \"glue:DeletePartition\", \"glue:GetTables\", \"glue:SearchTables\"]}",
"creationTime": 1624912434.431,
"lastUpdatedTime": 1624912434.431,
"isResourceTypeDefault": false
}
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [GetPermission](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/get-permission.html)。
### `get-resource-policies`
以下程式碼範例顯示如何使用 `get-resource-policies`。
**AWS CLI**
**取得資源的政策**
下列 `get-resource-policies` 範例顯示與資源共享相關聯之指定資源的資源型許可政策。
```
aws ram get-resource-policies \
--resource-arns arn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1fEXAMPLE
```
輸出：
```
{
"policies": [
"{\"Version\":\"2008-10-17\",\"Statement\":[{\"Sid\":\"RamStatement1\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":[]},\"Action\":[\"ec2:RunInstances\",\"ec2:CreateNetworkInterface\",\"ec2:DescribeSubnets\"],\"Resource\":\"arn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1fEXAMPLE\"}]}"
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [GetResourcePolicies](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/get-resource-policies.html)。
### `get-resource-share-associations`
以下程式碼範例顯示如何使用 `get-resource-share-associations`。
**AWS CLI**
**範例 1：列出所有資源類型的所有資源關聯**
下列 `get-resource-share-associations` 範例會列出所有資源共享中所有資源類型的資源關聯。
```
aws ram get-resource-share-associations \
--association-type RESOURCE
```
輸出：
```
{
"resourceShareAssociations": [
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"associatedEntity": "arn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1fEXAMPLE",
"resourceShareName": "MySubnetShare",
"associationType": "RESOURCE",
"status": "ASSOCIATED",
"creationTime": 1565303590.973,
"lastUpdatedTime": 1565303591.695,
"external": false
},
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/8167bdfe-4480-4a01-8632-315e0EXAMPLE",
"associatedEntity": "arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-36be0485f5ae379cc74cf8e92EXAMPLE",
"resourceShareName": "MyLicenseShare",
"associationType": "RESOURCE",
"status": "ASSOCIATED",
"creationTime": 1632342958.457,
"lastUpdatedTime": 1632342958.907,
"external": false
}
]
}
```
**範例 2：列出資源共享的主體關聯**
下列 `get-resource-share-associations` 範例僅列出指定資源共享的主體關聯。
```
aws ram get-resource-share-associations \
--resource-share-arns arn:aws:ram:us-west-2:123456789012:resource-share/7be8694e-095c-41ca-9ce8-7be4aEXAMPLE \
--association-type PRINCIPAL
```
輸出：
```
{
"resourceShareAssociations": [
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7be8694e-095c-41ca-9ce8-7be4aEXAMPLE",
"resourceShareName": "MyNewResourceShare",
"associatedEntity": "arn:aws:organizations::123456789012:ou/o-63bEXAMPLE/ou-46xi-rEXAMPLE",
"associationType": "PRINCIPAL",
"status": "ASSOCIATED",
"creationTime": 1634587042.49,
"lastUpdatedTime": 1634587044.291,
"external": false
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [GetResourceShareAssociations](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/get-resource-share-associations.html)。
### `get-resource-share-invitations`
以下程式碼範例顯示如何使用 `get-resource-share-invitations`。
**AWS CLI**
**列出您的資源共享邀請**
下列 `get-resource-share-invitations` 範例會列出您目前的資源共享邀請。
```
aws ram get-resource-share-invitations
```
輸出：
```
{
"resourceShareInvitations": [
{
"resourceShareInvitationArn": "arn:aws:ram:us-west2-1:111111111111:resource-share-invitation/32b639f0-14b8-7e8f-55ea-e6117EXAMPLE",
"resourceShareName": "project-resource-share",
"resourceShareArn": "arn:aws:ram:us-west-2:111111111111:resource-share/fcb639f0-1449-4744-35bc-a983fEXAMPLE",
"senderAccountId": "111111111111",
"receiverAccountId": "222222222222",
"invitationTimestamp": 1565312166.258,
"status": "PENDING"
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [GetResourceShareInvitations](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/get-resource-share-invitations.html)。
### `get-resource-shares`
以下程式碼範例顯示如何使用 `get-resource-shares`。
**AWS CLI**
**範例 1：列出您擁有的資源共享，並與他人共享**
下列 `get-resource-shares` 範例會列出已建立且正在與他人共享的資源共享。
```
aws ram get-resource-shares \
--resource-owner SELF
```
輸出：
```
{
"resourceShares": [
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/3ab63985-99d9-1cd2-7d24-75e93EXAMPLE",
"name": "my-resource-share",
"owningAccountId": "123456789012",
"allowExternalPrincipals": false,
"status": "ACTIVE",
"tags": [
{
"key": "project",
"value": "lima"
}
]
"creationTime": 1565295733.282,
"lastUpdatedTime": 1565295733.282
},
{
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"name": "my-resource-share",
"owningAccountId": "123456789012",
"allowExternalPrincipals": true,
"status": "ACTIVE",
"creationTime": 1565295733.282,
"lastUpdatedTime": 1565295733.282
}
]
}
```
**範例 2：列出其他人擁有且與您共享的資源共享**
下列 `get-resource-shares` 範例會列出其他人建立且與您共享的資源共享。在此範例中，沒有符合情況。
```
aws ram get-resource-shares \
--resource-owner OTHER-ACCOUNTS
```
輸出：
```
{
"resourceShares": []
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [GetResourceShares](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/get-resource-shares.html)。
### `list-pending-invitation-resources`
以下程式碼範例顯示如何使用 `list-pending-invitation-resources`。
**AWS CLI**
**列出待定資源共享中可用的資源**
下列 `list-pending-invitation-resources` 範例會列出與指定邀請相關聯的資源共享中的所有資源。
```
aws ram list-pending-invitation-resources \
--resource-share-invitation-arn arn:aws:ram:us-west-2:123456789012:resource-share-invitation/1e3477be-4a95-46b4-bbe0-c4001EXAMPLE
```
輸出：
```
{
"resources": [
{
"arn": "arn:aws:ec2:us-west-2:123456789012:subnet/subnet-04a555b0e6EXAMPLE",
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7be8694e-095c-41ca-9ce8-7be4aEXAMPLE",
"creationTime": 1634676051.269,
"lastUpdatedTime": 1634676052.07,
"status": "AVAILABLE",
"type": "ec2:Subnet"
},
{
"arn": "arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-36be0485f5ae379cc74cf8e92EXAMPLE",
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"creationTime": 1624912434.431,
"lastUpdatedTime": 1624912434.431,
"status": "AVAILABLE",
"type": "license-manager:LicenseConfiguration"
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListPendingInvitationResources](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-pending-invitation-resources.html)。
### `list-permissions`
以下程式碼範例顯示如何使用 `list-permissions`。
**AWS CLI**
**列出可用的 RAM 受管許可**
下列`list-permissions`範例列出僅適用於 Glue 資料庫資源類型的所有 RAM AWS 受管許可。
```
aws ram list-permissions \
--resource-type glue:Database
```
輸出：
```
{
"permissions": [
{
"arn": "arn:aws:ram::aws:permission/AWSRAMDefaultPermissionGlueDatabase",
"version": "1",
"defaultVersion": true,
"name": "AWSRAMDefaultPermissionGlueDatabase",
"resourceType": "glue:Database",
"creationTime": 1592007820.935,
"lastUpdatedTime": 1592007820.935,
"isResourceTypeDefault": true
},
{
"arn": "arn:aws:ram::aws:permission/AWSRAMPermissionGlueAllTablesReadWriteForDatabase",
"version": "2",
"defaultVersion": true,
"name": "AWSRAMPermissionGlueAllTablesReadWriteForDatabase",
"resourceType": "glue:Database",
"creationTime": 1624912413.323,
"lastUpdatedTime": 1624912413.323,
"isResourceTypeDefault": false
},
{
"arn": "arn:aws:ram::aws:permission/AWSRAMPermissionGlueDatabaseReadWrite",
"version": "2",
"defaultVersion": true,
"name": "AWSRAMPermissionGlueDatabaseReadWrite",
"resourceType": "glue:Database",
"creationTime": 1624912417.4,
"lastUpdatedTime": 1624912417.4,
"isResourceTypeDefault": false
},
{
"arn": "arn:aws:ram::aws:permission/AWSRAMPermissionGlueTableReadWriteForDatabase",
"version": "2",
"defaultVersion": true,
"name": "AWSRAMPermissionGlueTableReadWriteForDatabase",
"resourceType": "glue:Database",
"creationTime": 1624912434.431,
"lastUpdatedTime": 1624912434.431,
"isResourceTypeDefault": false
}
]
}
```
下列 `list-permissions` 範例顯示所有資源類型的可用 RAM 受管許可。
```
aws ram list-permissions
```
輸出：
```
{
"permissions": [
{
"arn": "arn:aws:ram::aws:permission/AWSRAMBlankEndEntityCertificateAPICSRPassthroughIssuanceCertificateAuthority",
"version": "1",
"defaultVersion": true,
"name": "AWSRAMBlankEndEntityCertificateAPICSRPassthroughIssuanceCertificateAuthority",
"resourceType": "acm-pca:CertificateAuthority",
"creationTime": 1623264861.085,
"lastUpdatedTime": 1623264861.085,
"isResourceTypeDefault": false
},
{
"arn": "arn:aws:ram::aws:permission/AWSRAMDefaultPermissionAppMesh",
"version": "1",
"defaultVersion": true,
"name": "AWSRAMDefaultPermissionAppMesh",
"resourceType": "appmesh:Mesh",
"creationTime": 1589307188.584,
"lastUpdatedTime": 1589307188.584,
"isResourceTypeDefault": true
},
...TRUNCATED FOR BREVITY...
{
"arn": "arn:aws:ram::aws:permission/AWSRAMSubordinateCACertificatePathLen0IssuanceCertificateAuthority",
"version": "1",
"defaultVersion": true,
"name": "AWSRAMSubordinateCACertificatePathLen0IssuanceCertificateAuthority",
"resourceType": "acm-pca:CertificateAuthority",
"creationTime": 1623264876.75,
"lastUpdatedTime": 1623264876.75,
"isResourceTypeDefault": false
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListPermissions](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-permissions.html)。
### `list-principals`
以下程式碼範例顯示如何使用 `list-principals`。
**AWS CLI**
**列出可存取資源的主體**
下列 `list-principals` 範例顯示可透過任何資源共享存取指定類型資源的主體清單。
```
aws ram list-principals \
--resource-type ec2:Subnet
```
輸出：
```
{
"principals": [
{
"id": "arn:aws:organizations::123456789012:ou/o-gx7EXAMPLE/ou-29c5-zEXAMPLE",
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"creationTime": 1565298209.737,
"lastUpdatedTime": 1565298211.019,
"external": false
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListPrincipals](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-principals.html)。
### `list-resource-share-permissions`
以下程式碼範例顯示如何使用 `list-resource-share-permissions`。
**AWS CLI**
**列出目前連接至資源共享的所有 RAM 受管許可**
下列 `list-resource-share-permissions` 範例會列出連接至指定資源共享的所有 RAM 受管許可。
```
aws ram list-resource-share-permissions \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/27d09b4b-5e12-41d1-a4f2-19dedEXAMPLE
```
輸出：
```
{
"permissions": [
{
"arn": "arn:aws:ram::aws:permission/AWSRAMDefaultPermissionLicenseConfiguration",
"version": "1",
"resourceType": "license-manager:LicenseConfiguration",
"status": "ASSOCIATED",
"lastUpdatedTime": 1632342984.234
},
{
"arn": "arn:aws:ram::aws:permission/AWSRAMPermissionGlueDatabaseReadWrite",
"version": "2",
"resourceType": "glue:Database",
"status": "ASSOCIATED",
"lastUpdatedTime": 1632512462.297
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListResourceSharePermissions](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-resource-share-permissions.html)。
### `list-resource-types`
以下程式碼範例顯示如何使用 `list-resource-types`。
**AWS CLI**
**列出 RAM AWS 支援的資源類型**
下列`list-resource-types`範例列出 RAM AWS 目前支援的所有資源類型。
```
aws ram list-resource-types
```
輸出：
```
{
"resourceTypes": [
{
"resourceType": "route53resolver:FirewallRuleGroup",
"serviceName": "route53resolver"
},
{
"resourceType": "ec2:LocalGatewayRouteTable",
"serviceName": "ec2"
},
...OUTPUT TRUNCATED FOR BREVITY...
{
"resourceType": "ec2:Subnet",
"serviceName": "ec2"
},
{
"resourceType": "ec2:TransitGatewayMulticastDomain",
"serviceName": "ec2"
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListResourceTypes](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-resource-types.html)。
### `list-resources`
以下程式碼範例顯示如何使用 `list-resources`。
**AWS CLI**
**列出與資源共享相關聯的資源**
下列 `list-resources` 範例會列出指定資源共享中屬於指定資源類型的所有資源。
```
aws ram list-resources \
--resource-type ec2:Subnet \
--resource-owner SELF \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
輸出：
```
{
"resources": [
{
"arn": "aarn:aws:ec2:us-west-2:123456789012:subnet/subnet-0250c25a1f4e15235",
"type": "ec2:Subnet",
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"creationTime": 1565301545.023,
"lastUpdatedTime": 1565301545.947
}
]
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [ListResources](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/list-resources.html)。
### `promote-resource-share-created-from-policy`
以下程式碼範例顯示如何使用 `promote-resource-share-created-from-policy`。
**AWS CLI**
**將以資源政策為基礎的資源共享提升為 RAM AWS 中的完整功能**
下列`promote-resource-share-created-from-policy`範例會採用您透過連接以資源為基礎的政策而隱含建立的資源共用，並將其轉換為與 AWS RAM 主控台及其 CLI 和 API 操作完全運作。
```
aws ram promote-resource-share-created-from-policy \
--resource-share-arn arn:aws:ram:us-east-1:123456789012:resource-share/91fa8429-2d06-4032-909a-90909EXAMPLE
```
輸出：
```
{
"returnValue": true
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [PromoteResourceShareCreatedFromPolicy](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/promote-resource-share-created-from-policy.html)。
### `reject-resource-share-invitation`
以下程式碼範例顯示如何使用 `reject-resource-share-invitation`。
**AWS CLI**
**拒絕資源共享邀請**
下列 `reject-resource-share-invitation` 範例會拒絕指定的資源共享邀請。
```
aws ram reject-resource-share-invitation \
--resource-share-invitation-arn arn:aws:ram:us-west-2:111111111111:resource-share-invitation/32b639f0-14b8-7e8f-55ea-e6117EXAMPLE
```
輸出：
```
"resourceShareInvitations": [
{
"resourceShareInvitationArn": "arn:aws:ram:us-west2-1:111111111111:resource-share-invitation/32b639f0-14b8-7e8f-55ea-e6117EXAMPLE",
"resourceShareName": "project-resource-share",
"resourceShareArn": "arn:aws:ram:us-west-2:111111111111:resource-share/fcb639f0-1449-4744-35bc-a983fEXAMPLE",
"senderAccountId": "111111111111",
"receiverAccountId": "222222222222",
"invitationTimestamp": 1565319592.463,
"status": "REJECTED"
}
]
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [RejectResourceShareInvitation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/reject-resource-share-invitation.html)。
### `tag-resource`
以下程式碼範例顯示如何使用 `tag-resource`。
**AWS CLI**
**將標籤新增至資源共享**
下列 `tag-resource` 範例會將標籤索引鍵 `project` 和相關聯的值 `lima` 新增至指定的資源共享。
```
aws ram tag-resource \
--tags key=project,value=lima \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
此命令不會產生輸出。
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [TagResource](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/tag-resource.html)。
### `untag-resource`
以下程式碼範例顯示如何使用 `untag-resource`。
**AWS CLI**
**從資源共享移除標籤**
下列 `untag-resource` 範例會從指定的資源共享中移除 `project` 標籤索引鍵和相關聯的值。
```
aws ram untag-resource \
--tag-keys project \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
此命令不會產生輸出。
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [UntagResource](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/untag-resource.html)。
### `update-resource-share`
以下程式碼範例顯示如何使用 `update-resource-share`。
**AWS CLI**
**更新資源共享**
下列`update-resource-share`範例會變更指定的資源共用，以允許不在 AWS 組織的外部主體。
```
aws ram update-resource-share \
--allow-external-principals \
--resource-share-arn arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE
```
輸出：
```
{
"resourceShare": {
"resourceShareArn": "arn:aws:ram:us-west-2:123456789012:resource-share/7ab63972-b505-7e2a-420d-6f5d3EXAMPLE",
"name": "my-resource-share",
"owningAccountId": "123456789012",
"allowExternalPrincipals": true,
"status": "ACTIVE",
"creationTime": 1565295733.282,
"lastUpdatedTime": 1565303080.023
}
}
```
+ 如需 API 詳細資訊，請參閱《AWS CLI 命令參考》**中的 [UpdateResourceShare](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/update-resource-share.html)。