Dedicated Channel Cross-Account Authorization for Cloud Smart Network

If a dedicated channel under your account needs to be loaded into a Cloud Smart Network (CSN) under another account to achieve private network interconnection, you must first create a cross-account dedicated channel under your account. Select Other Accounts as the assignee and enter the user ID of the account that owns the CSN instance. The CSN can then load your dedicated channel.

Similarly, if a CSN under your account needs to load a dedicated channel from another account, the other account must first create a cross-account dedicated channel, select Other Accounts as the assignee, and enter your user ID (the account that owns the CSN instance). Your account can then load the other user’s dedicated channel.

Description

Regardless of whether a dedicated channel is mounted to a CSN under the same account or a CSN under another account, one dedicated channel can only be mounted to one CSN.

Add cross-account authorization

This article uses the example of adding a dedicated channel (under your account) to a CSN (under another account) to explain the cross-account assignment process. If the dedicated channel and CSN are under the same account, no authorization is required - the CSN can directly load the dedicated channel.

Prerequisites

• Before authorizing the Cloud Smart Network under other accounts, you need to obtain the following information first:

  • Root account ID of the account that owns the CSN.
• One dedicated channel can only be assigned to one CSN instance across accounts.

Operation steps

1. Sign in to the Dedicated Channel Console with your account.
2. Click the Add Dedicated Channel button. In the Assignee field, select Other Accounts and enter the assignee’s account ID.
3. Click OK to complete the operation.

After successful authorization, when the other account loads instances to its CSN, it can select the authorized dedicated channel from your account. For details on loading instances to a CSN, refer to Network Instance.

Cancel cross-account authorization

If you want to restrict access to your dedicated channel (under your account) and prevent CSNs from other accounts from loading it for interconnection, you can unload the channel in the Network Instance Management page of the CSN.

Operation restrictions

• If your dedicated channel has been authorized to a CSN of another account but not yet loaded by that CSN, you can delete the dedicated channel directly.
• If your dedicated channel has been authorized to a CSN of another account and already loaded by that CSN, you must first unload the channel from the CSN before canceling the authorization.

Operation steps

1. Sign in to the Dedicated Channel Console with your account.
2. Determine if the dedicated channel is loaded to a CSN of another account:

• If loaded: First unload the channel in the Network Instance Management of the CSN, then delete it in the assignor’s dedicated channel console;
• If not loaded: Delete the channel directly in the assignor’s dedicated channel console;

3. The above operations complete the cancellation of authorization for the dedicated channel.

Related documents

Load Network Instances to CSN
Unload Network Instances from CSN