amazon-web-services - Route53 私有(private)托管区域将在两个账户中通过 AWS VPC 对等工作吗

Question

我有类似的问题 Will Route53 private hosted zone work over AWS VPC Peering但有一个区别。

当这两个 VPC 在不同的账户中时，是否可以设置相同的场景？因此，托管区域位于一个具有一个 VPC 的帐户中，并且有第二个 VPC 但位于不同的帐户中(通过 VPC 对等互连)。

Answer 1

是的，可以与其他帐户共享私有(private) route53 托管区域。

If you want to associate a VPC that you created with one AWS account with a private hosted zone that you created with a different account, perform the following procedure:

To associate an Amazon VPC and a private hosted zone that you created with different AWS accounts

Using the account that created the hosted zone, authorize the association of the VPC with the private hosted zone by using one of the following methods:

AWS SDK or AWS Tools for Windows PowerShell – See the applicable documentation on the AWS Documentation page AWS CLI – See the route53 page in the AWS Command Line Interface Reference Amazon Route 53 API – See CreateVPCAssociationAuthorization in the Amazon Route 53 API Reference Note the following:

If you want to associate multiple VPCs that you created with one account with a hosted zone that you created with a different account, you must submit one authorization request for each VPC.

When you authorize the association, you must specify the hosted zone ID, so the private hosted zone must already exist. You can't use the Amazon Route 53 console either to authorize the association of a VPC with a private hosted zone or to make the association. Using the account that created the VPC, associate the VPC with the hosted zone. As with authorizing the association, you can use the AWS SDK, Tools for Windows PowerShell, the AWS CLI, or the Amazon Route 53 API. If you're using the API, use the AssociateVPCWithHostedZone action.

Optional but recommended – Delete the authorization to associate the VPC with the hosted zone. Deleting the authorization does not affect the association, it just prevents you from reassociating the VPC with the hosted zone in the future. If you want to reassociate the VPC with the hosted zone, you'll need to repeat steps 1 and 2 of this procedure.

Note For the limit on the number of authorizations that you can create, see Limits on Entities.

http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/hosted-zone-private-associate-vpcs-different-accounts.html