Docs

Transit Router

Instance sharing

Cross-account Transit Router sharing

Scenarios

To enable cross-account connectivity, you must first share your Transit Router (TR) with another account that owns the target network instance. Once shared, the recipient account can manage and connect to the TR.

Prerequisites

You have created a TR instance. To create a new instance, see Creating a Transit Router instance.

If you share the Transit Router (TR) within the same enterprise organization, you must enable the enterprise organization.

Configuration procedures

Step 1: Initiate TR sharing (Resource owner)

In the left-side navigation pane, select Resource sharing > Shared by me.

In the top menu bar, select your target region.

On the Shared unit tab, click Create shared unit and configure the parameters based on the table below.

Parameter	Description	Example
Unit name	Type in a name for the shared unit.	Shared TR
Regions	Region defaults to the region selected in the top menu bar. To modify, reselect the region in the top menu bar.	China (Beijing)
Product	Select the Transit Router - TR instance.	Transit Router - TR instance.
ID	Type in the ID of the TR to be shared, then search and check it.	Check the target transit router

Click Next to associate sharing permissions.

TR sharing permissions are system-defined and cannot be modified. For default supported actions, see Instructions.

Click Next to associate shared users.

Parameter	Description	Example
Resource user	Choose a method for resource sharing. Allow sharing with any account: Share the TR with any VolcanoEngine root account. Only allow sharing with enterprises and organizations: Share the TR only with VolcanoEngine root accounts in the same enterprise organization.	Allow sharing with any account
Add by business organization	Select main account for the user type, enter the user ID, and click Add to assign the resource user. tip Enterprise organization administrators can enable organization-based sharing by turning on Add by business organization. This allows them to quickly select the entire organization, specific organizational units, or individual member accounts from the organizational directory.	--

Click Next to confirm that the resources, associated permissions, and shared users are correct.

Click Confirm to complete the action.

Step 2: Accept a sharing invitation (Shared user)

tip

When sharing resources within an enterprise organization, member accounts automatically accept invitations. No manual acceptance is required. The sharing invitation is valid for 14 days and will be automatically denied if it expires.

In the left-side navigation pane, select Resource sharing > Share with me.

In the top menu bar, select your target Region.

Click Accept to the right of the shared unit to complete the action.

Step 3: Create a cross-account attachment (Shared user)

Create a cross-account intra-region attachment based on the type of the target network instance. For procedures, see Creating a VPC attachment, Creating a VPN attachment, and Creating a Direct Connect Gateway attachment.

warning

When configuring parameters, the system defaults to disabling association forwarding and route learning. If these features are enabled, the default route table is automatically associated, which cannot be modified by the shared user. To modify it, contact the resource owner.

Related actions

Related actions	Description
Modify TR sharing	After initiating sharing, you can modify shared resources and users as needed. For procedure, see Edit a shared unit.
Cancel TR sharing	If cross-account communication via this Transit Router (TR) is no longer needed, cancel the share. For procedure, see Delete a shared unit.
Decline a sharing invitation	shared resources you do not need can be denied. For procedure, see Reject sharing invitation.