Docs

Direct Connect

DC Gateway

Authorizing a cross-account CEN

When you want to load a Direct Connect (DC) Gateway under your account to a Cloud Enterprise Network (CEN) under another account for private network communication, you need to add a CEN authorization within your account. Once authorized, your DC Gateway can be loaded to the CEN.

Similarly, if you want to load a DC Gateway under another account to your CEN, another account needs to add a CEN authorization. Once authorized, its DC Gateway can be loaded to your CEN.

tip

Whether loading to a CEN under the same account or to a CEN under another account via cross-account authorization, you can load a single DC Gateway to only one CEN.

Add cross-account authorization

This example demonstrates the cross-account authorization process by loading a DC Gateway under this account to a CEN under another account If the DC Gateway and the CEN are under the same account, you can directly load this DC Gateway to the CEN without authorizing the CEN.

Prerequisites

Before authorizing a CEN under another account, you need to obtain the following information:

The CEN instance ID.

The main account ID of the account to which the CEN belongs.

You can only authorize one cross-account CEN instance for a DC Gateway.

Procedure

In the top menu bar, select your target region.

Click the name of the target DC Gateway.

Select the CEN cross-account authorization tab, click CEN cross-account authorization, and type the target CEN Instance ID and its account ID.

Click Authorize to complete the action.

After authorization, when loading an instance to the CEN within other accounts, you can select the authorized DC Gateway under your account. For instructions on how to attach network instances to CEN, see Installing a network instance.

Cancel a cross-account authorization

If you want to limit the permissions of the DC Gateway under your account and prevent other accounts' CEN from loading your DC Gateway for interconnection, you can cancel cross-account authorization. After canceling authorization, other accounts will be unable to load your DC Gateway to their unauthorized CENs.

Limits

If the DC Gateway under your account is authorized but not loaded to a CEN of another account, you can directly cancel the authorization.

If the DC Gateway under your account is authorized and loaded to a CEN of another account, you must unload the DC Gateway from the CEN before canceling authorization.

Procedure

In the top menu bar, select your target region.

Click the name of the target DC Gateway.

Select the CEN cross-account authorization tab to view the account and CEN information authorized for the current DC Gateway.

Click Deauthorize in the Actions column of the target account.

Click Deauthorize to complete the operation.