Skip to content
AWS for Query.Farm

aws.ram.get_resource_share_associations

Example SQL Queries

SELECT * FROM
aws.ram.get_resource_share_associations
WHERE
"association_type" = 'VALUE';

Description

Retrieves the lists of resources and principals that associated for resource shares that you own.

Table Definition

Column NameColumn Data Type
association_type Required Input Column

The type of entity included in this association.

VARCHAR
association_status Input Column

Specifies that you want to retrieve only associations that have this status.

VARCHAR
principal Input Column

Specifies the ID of the principal whose resource shares you want to retrieve. This can be an Amazon Web Services account ID, an organization ID, an organizational unit ID, or the Amazon Resource Name (ARN) of an individual IAM role or user.

You cannot specify this parameter if the association type is RESOURCE.

VARCHAR
resource_arn Input Column

Specifies the Amazon Resource Name (ARN) of a resource whose resource shares you want to retrieve.

You cannot specify this parameter if the association type is PRINCIPAL.

VARCHAR
resource_share_arns Input Column

Specifies a list of Amazon Resource Names (ARNs) of the resource share whose associations you want to retrieve.

VARCHAR[]
Show child fields
resource_share_arns[]
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
associated_entity

The associated entity. This can be either of the following:

  • For a resource association, this is the Amazon Resource Name (ARN) of the resource.

  • For principal associations, this is one of the following:

    • The ID of an Amazon Web Services account

    • The Amazon Resource Name (ARN) of an organization in Organizations

    • The ARN of an organizational unit (OU) in Organizations

    • The ARN of an IAM role

    • The ARN of an IAM user

VARCHAR
creation_time

The date and time when the association was created.

TIMESTAMP_S
external

Indicates whether the principal belongs to the same organization in Organizations as the Amazon Web Services account that owns the resource share.

BOOLEAN
last_updated_time

The date and time when the association was last updated.

TIMESTAMP_S
resource_share_arn

The Amazon Resource Name (ARN) of the resource share.

VARCHAR
resource_share_name

The name of the resource share.

VARCHAR
status

The current status of the association.

VARCHAR
status_message

A message about the status of the association.

VARCHAR