Sharing a snapshot with another account in the console

You can share a snapshot with another account in the console.

1. Go to the list of snapshots. In the IBM Cloud console, go to the menu > Infrastructure > Storage > Snapshots.
2. From the Actions menu , select Share snapshot.
3. Enter the account ID of the account that you want to share the snapshot with.
4. Click Create a custom IAM authorization.

Alternatively, you can create a service-to-service authorization through the Manage > Access (IAM) > Authorizations menu. For more information, see Creating service-to-service authorization for cross-account restore in the console.

Removing sharing permissions for a snapshot in the console

1. Go to the list of snapshots. In the IBM Cloud console, go to the menu > Infrastructure > Storage > Snapshots.

2. From the Actions menu , select Manage share permission.

3. The side-panel displays the list of accounts that you shared your snapshot with.

   The list shows all the authorization that were set up for the snapshot. For example, if an account has an authorization for this specific snapshot and an authorization for all snapshots in your account, that account is listed twice.

4. Click Manage IAM Authorization to go to the Authorization page to modify or revoke the authorization.

Alternatively, you can manage a service-to-service authorization policy directly through the Manage > Access (IAM) > Authorizations menu. For more information, see Using authorizations to grant access between services.

Sharing a snapshot with another account from the CLI

You can create a service-to-service authorization for a specific snapshot from the CLI by using the ibmcloud iam authorization-policy-create command. For more information, see Creating service-to-service authorization for cross-account restore from the CLI.

Removing sharing permissions for a snapshot from the CLI

You can remove a service-to-service authorization for a specific snapshot from the CLI by using the authorization-policy-delete command. For more information, see Removing an authorization by using the CLI.

Sharing a snapshot with another account with the API

You can programmatically create a service-to-service authorization for a specific snapshot by calling the policies method in the IAM Policy Management API. For more information, see Creating service-to-service authorization for cross-account restore with the API.

Removing sharing permissions for a snapshot with the API

You can programmatically revoke a service-to-service authorization for a specific snapshot by calling the policies method in the IAM Policy Management API. For more information, see Removing an authorization by using the API.

Sharing a snapshot with another account with Terraform

You can create a service-to-service authorization for a specific snapshot by using Terraform. For more information, see Creating service-to-service authorization for cross-account restore with Terraform.

Removing sharing permissions for a snapshot with Terraform

You can remove a service-to-service authorization for a specific snapshot by using Terraform. For more information, see Removing an authorization by using Terraform.