Share a snapshot with other Alibaba Cloud accounts - Elastic Compute Service

A sharer can share a snapshot with other Alibaba Cloud accounts or share it within an enterprise organization based on a resource directory. The recipient can use the shared snapshot to quickly create disks, which facilitates cross-account collaboration or resource sharing within an enterprise. This topic describes the considerations and procedures for sharing and unsharing snapshots.

Elastic Compute Service

Snapshot sharing is suitable for the following scenarios:

This topic describes how to use the Alibaba Cloud CDN console to configure the Brotli compression feature. This feature can compress static text files to reduce the size of content transmitted to clients, accelerate content delivery, and reduce bandwidth costs.
This topic describes how to create a disk snapshot. Snapshots are used to back up disk data at specific points in time. You can use snapshots to restore a disk to its state at the time when the snapshot was created.
The deployment of a Kubernetes cluster requires a minimum of three nodes. If you want to deploy a highly available cluster, you need at least five nodes.
This topic describes how to use the Alibaba Cloud command-line interface (CLI) to create a snapshot for a disk. You can use the snapshot to back up disk data or create a custom image. Prerequisites The Alibaba Cloud CLI is installed. For more information, see What is Alibaba Cloud CLI? Procedure 1. Run the following command to create a snapshot: aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** [--SnapshotName SnapshotName] [--Description Description] [--RetentionDays RetentionDays] [--Category Standard|Flash] [--ClientToken ClientToken] [--ResourceGroupId ResourceGroupId] [--Tag.N.Key TagKey] [--Tag.N.Value TagValue] The following table describes the parameters in the command. Parameter Required Example Description --DiskId Yes d-bp1dhjo2g81qz8fv**** The ID of the disk for which you want to create a snapshot. --SnapshotName No test-snapshot The name of the snapshot. The name must be 2 to 128 characters in length and can contain letters, digits, colons (:), underscores (_), and hyphens (-). It must start with a letter and cannot start with http:// or https://. --Description No This is a description example. The description of the snapshot. The description must be 2 to 256 characters in length and cannot start with http:// or https://. --RetentionDays No 30 The retention period of the snapshot. Unit: days. The snapshot is automatically released when the retention period expires. Valid values: 1 to 65536. Default value: null, which indicates that the snapshot is not automatically released. --Category No Flash The category of the snapshot. Valid values: Standard: standard snapshot Flash: local snapshot Default value: Standard. --ClientToken No 123e4567-e89b-12d3-a456-426655440000 The client token that is used to ensure the idempotence of the request. You can use the client to generate the value, but you must make sure that it is unique among different requests. The ClientToken value can contain only ASCII characters and cannot exceed 64 characters in length. --ResourceGroupId No rg-bp67acfmxazb4p**** The ID of the resource group to which to assign the snapshot. --Tag.N.Key No TestKey The key of tag N to be added to the snapshot. Valid values of N: 1 to 20. The tag key cannot be an empty string. It can be up to 128 characters in length and cannot start with acs: or aliyun. It cannot contain http:// or https://. --Tag.N.Value No TestValue The value of tag N to be added to the snapshot. Valid values of N: 1 to 20. The tag value can be an empty string. It can be up to 128 characters in length and cannot start with acs: or contain http:// or https://. 2. Run the following command to query the creation progress of the snapshot: aliyun ecs DescribeSnapshots --RegionId cn-hangzhou --SnapshotIds '["s-bp1afnc98r8kjhtr****"]' In the returned information, when the Status value is accomplished, the snapshot is created. Examples Example 1: Create a standard snapshot for a disk aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** Example 2: Create a local snapshot for a disk aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** --Category Flash Example 3: Create a snapshot for a disk and set the retention period of the snapshot to 30 days aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** --RetentionDays 30 Example 4: Create a snapshot for a disk and add tags to the snapshot aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** --Tag.1.Key TestKey --Tag.1.Value TestValue

Considerations

This topic describes how to use the Alibaba Cloud Command Line Interface (CLI) to create a snapshot for a disk. Prerequisites You have installed the Alibaba Cloud CLI. For more information, see What is Alibaba Cloud CLI? Procedure 1. Run the following command to create a snapshot: aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81qz8fv**** --SnapshotName testSnapForAliCLI The following output is returned: { "RequestId": "C8B26B44-0189-443E-9816-D951F59623A9", "SnapshotId": "s-bp1afnc98r8kjhtr****" } 2. Run the following command to query the snapshot creation progress: aliyun ecs DescribeSnapshots --RegionId cn-hangzhou --SnapshotIds '["s-bp1afnc98r8kjhtr****"]' The following output is returned: { "PageNumber": 1, "PageSize": 10, "RequestId": "ACD9BBB0-A9D1-46D7-9630-B7A69889E110", "Snapshots": { "Snapshot": [ { "CreationTime": "2020-06-19T06:00:00Z", "Description": "", "EncryptionAlgorithm": "", "InstantAccess": false, "InstantAccessRetentionDays": 1, "KMSKeyId": "", "LastModifiedTime": "2020-06-19T06:00:00Z", "ProductCode": "", "Progress": "100%", "RegionId": "cn-hangzhou", "ResourceGroupId": "", "RetentionDays": 0, "SnapshotId": "s-bp1afnc98r8kjhtr****", "SnapshotName": "testSnapForAliCLI", "SnapshotType": "user", "SourceDiskId": "d-bp1dhjo2g81qz8fv****", "SourceDiskSize": 40, "SourceDiskType": "cloud_ssd", "SourceStorageType": "", "Status": "accomplished", "Tags": { "Tag": [] }, "Usage": "none" } ] }, "TotalCount": 1 }

The Elastic Compute Service (ECS) is a high-performance, stable, reliable, and scalable IaaS (Infrastructure as a Service) level cloud computing service provided by Alibaba Cloud. Compared with physical servers, ECS instances are more convenient to use and can be managed more flexibly. You can create instances, change the operating system, and add or release any number of ECS instances at any time based on your business needs.	Description
Billing	The Alibaba Cloud Elasticsearch console provides a dedicated page for managing clusters. You can view the status of all your clusters and perform operations such as creating, restarting, and releasing clusters. Alibaba Cloud Elastic Compute Service (ECS) provides elastic and secure virtual cloud servers to cater to all your cloud hosting needs. You can create an ECS instance in the ECS console. The Snapshot feature allows you to create point-in-time copies of your disk data. You can use snapshots to back up data or create custom images.
The Alibaba Cloud Elastic Compute Service (ECS) is a high-performance, stable, reliable, and scalable IaaS-level cloud computing service provided by Alibaba Cloud. ECS eliminates the need to invest in physical servers upfront and allows you to scale computing resources on demand, making it more efficient than traditional IT infrastructure solutions. ECS supports rapid deployment and management of applications, and provides robust security capabilities to protect your data and workloads.	You can share a snapshot with up to 64 Alibaba Cloud accounts. Each Alibaba Cloud account can share up to 1,024 snapshots.
Limits on accounts	You cannot share snapshots between accounts on the China site and accounts on the international site.
Others	Sharer This topic describes how to create a snapshot for a disk. Snapshots are used to back up disk data at a specific point in time. You can use snapshots to restore disk data or create disks. You can create snapshots for disks to back up data. For example, you can create snapshots before you: Update the operating system Resize disks Change application environments unshare the snapshot The Alibaba Cloud Elastic Compute Service (ECS) is a high-performance, stable, reliable, and scalable IaaS-level cloud computing service. ECS eliminates the need to invest in physical servers upfront and allows you to scale computing resources on demand, enabling you to focus on your core business. Alibaba Cloud provides encrypted snapshots to protect your data. When you create an encrypted snapshot, the snapshot is automatically encrypted with the specified key. You can use encrypted snapshots to create disks, ensuring that all data on the created disks is encrypted. Note If you want to share an encrypted snapshot that uses a service key for encryption, you can use the Copy Snapshot feature to replace the service key with a customer master key (CMK) before sharing the snapshot. For more information about ECS encryption keys, see Encryption keys. Sharee You cannot use shared snapshots to create custom images. This topic describes how to create a disk snapshot. A snapshot is a point-in-time copy of a disk. You can use snapshots to back up data or create custom images. You cannot directly delete a shared snapshot. To delete a shared snapshot, go to the Resource Sharing page and manually unshare the snapshot. The Alibaba Cloud Elastic Compute Service (ECS) is a high-performance, stable, reliable, and scalable IaaS-level cloud computing service. ECS eliminates the need to invest in physical servers upfront and allows you to scale computing resources on demand, making it more efficient to deploy applications and services. Accounts that have snapshots shared with them cannot reshare those snapshots. Note This topic describes how to create a snapshot for a disk. You can use snapshots to back up data, create images, and roll back disks. Prerequisites A disk is created and attached to an ECS instance. For more information, see Create a disk and Attach a data disk. Background information A snapshot is a point-in-time backup of a disk. It contains the data stored on the disk at the time the snapshot was created. You can use snapshots to back up data, create custom images, and roll back disks. You can create snapshots for system disks and data disks. After a snapshot is created, you can use it to roll back the source disk or create a custom image. This topic describes how to create a disk and attach it to an ECS instance. You can copy the snapshot and share the snapshot copy. You can use the Snapshot feature to create snapshots for disks. Snapshots are used to back up disk data at specific points in time. You can use snapshots to restore a disk to the state it was in when the snapshot was created. For more information about snapshots, see Snapshot overview. When you create a snapshot, the system automatically creates a snapshot policy that has a retention period of one day. You can modify the snapshot policy based on your business requirements. For more information, see Apply or disable an automatic snapshot policy. Note Alibaba Cloud provides a variety of methods to create snapshots. You can create snapshots in the Elastic Compute Service (ECS) console, call API operations, or use Alibaba Cloud CLI. This topic describes how to create snapshots in the ECS console. This topic describes how to create a snapshot for a disk. Snapshots are used to back up disk data at specific points in time. You can use snapshots to restore disk data or create disks. You can use one of the following methods to create a snapshot: Method 1: Create a snapshot in the ECS console. Method 2: Call the CreateSnapshot operation. The following section describes how to create a snapshot in the ECS console. Prerequisites The disk for which you want to create a snapshot is in the In Use or Unattached state. If the disk is in the In Use state, make sure that the ECS instance to which the disk is attached is in the Running or Stopped state. Procedure Log on to the ECS console. In the left-side navigation pane, choose Storage & Snapshots > Disks. In the top navigation bar, select a region. Find the disk for which you want to create a snapshot and click Create Snapshot in the Actions column. In the Create Snapshot dialog box, configure the parameters. Enter a snapshot name. Enter a description for the snapshot. Specify the retention period for the snapshot. If you select Keep It Forever, the snapshot is permanently retained. If you select Expire After, you must specify the number of days for which you want to retain the snapshot. After the retention period ends, the snapshot is automatically deleted. Specify whether to create an instant access snapshot. Instant access snapshots can be used to restore disks within a few seconds. For more information, see Instant access. Click Create. What to do next After the snapshot is created, you can perform the following operations: Roll back a disk by using a snapshot Create a disk from a snapshot

Elastic Compute Service

Before you share a snapshot, make sure that the snapshot does not contain sensitive data or files.
This topic describes how to create a snapshot for a disk. Snapshots are used to back up disk data at a specific point in time. You can use snapshots to restore disk data or create disks.
- This topic describes how to use the Alibaba Cloud CDN console to add a domain name to Alibaba Cloud CDN.
  The Primary Account (ECS) is a high-performance, stable, reliable, and scalable IaaS (Infrastructure as a Service) level cloud computing service provided by Alibaba Cloud. Compared with traditional servers, ECS instances are more convenient to use and manage. You can create instances, modify configurations, and add or release any number of ECS instances at any time based on your business needs.
- This topic describes how to use the Alibaba Cloud CLI to create a resource directory and invite members to join the resource directory. Prerequisites You have an Alibaba Cloud account. Background information Resource Directory is a service that helps you manage resources across multiple Alibaba Cloud accounts. You can use Resource Directory to create and manage member accounts, and organize these accounts into a multi-level hierarchy. For more information, see Resource Directory overview. Procedure Step 1: Create a resource directory Run the following command to create a resource directory: aliyun resourcedirectory CreateResourceDirectory Example response: { "ResourceDirectory": { "ResourceDirectoryId": "rd-****", "MasterAccountId": "172841235500****", "MasterAccountName": "someone@example.com", "CreateTime": "2020-10-23T09:12:04.743Z", "RootFolderId": "r-****" }, "RequestId": "9B34724D-54B0-4A51-B34D-4512372FE1BE" } Step 2: Invite a member to join the resource directory Run the following command to invite a member to join the resource directory: aliyun resourcedirectory InviteAccountToResourceDirectory --AccountId 123456789012**** Example response: { "Invitation": { "InvitationId": "h-****", "MasterAccountId": "172841235500****", "MasterAccountName": "someone@example.com", "TargetEntity": { "Type": "Account", "Id": "123456789012****", "Name": "someone@example.com" }, "CreateTime": "2020-10-23T09:12:04.743Z", "Status": "Pending", "ExpiryTime": "2020-10-24T09:12:04.743Z" }, "RequestId": "9B34724D-54B0-4A51-B34D-4512372FE1BE" } Step 3: Accept the invitation Run the following command to accept the invitation: aliyun resourcedirectory AcceptInvitation --InvitationId h-**** Example response: { "RequestId": "9B34724D-54B0-4A51-B34D-4512372FE1BE" } Step 4: View the member account Run the following command to view the member account: aliyun resourcedirectory ListAccounts Example response: { "Accounts": [ { "AccountId": "123456789012****", "DisplayName": "someone@example.com", "FolderId": "r-****", "JoinMethod": "invited", "JoinTime": "2020-10-23T09:12:04.743Z", "ModifyTime": "2020-10-23T09:12:04.743Z", "ResourceDirectoryId": "rd-****", "Status": "CreateSuccess", "Type": "Resource" } ], "RequestId": "9B34724D-54B0-4A51-B34D-4512372FE1BE", "TotalCount": 1 }
  - A resource directory is a resource management service that allows you to manage multiple Alibaba Cloud accounts in a centralized manner. A resource directory contains the following entities: Management account: The account that creates the resource directory. A management account can invite existing Alibaba Cloud accounts to join the resource directory as members, or create new member accounts in the resource directory. Member account: An account that joins a resource directory. A member account can be an independent Alibaba Cloud account that is invited to join the resource directory, or an account that is created within the resource directory. Resource directory root: The root node of a resource directory. All member accounts must belong to the resource directory root or a folder in the resource directory. Folder: A container used to group member accounts. You can create folders in the resource directory root or within other folders to form a multi-level structure.
  - Your account has passed enterprise verification, Resource Directory is enabled for your account, and organization sharing is enabled for the resource directory.
This topic describes how to use the Alibaba Cloud CLI to create a snapshot for a disk. Prerequisites Before you create a snapshot, make sure that the following requirements are met: The Alibaba Cloud CLI is installed. For more information, see Install Alibaba Cloud CLI. The ECS instance to which the disk is attached is in the Running or Stopped state. Procedure Run the following command to create a snapshot: aliyun ecs CreateSnapshot --DiskId d-bp1dhjo2g81jgw8v**** --SnapshotName test-snapshot Run the following command to query the snapshot creation progress: aliyun ecs DescribeSnapshots --RegionId cn-hangzhou --SnapshotIds '["s-bp1afnc98zv6x9ep****"]' The following output is returned: { "PageNumber": 1, "TotalCount": 1, "PageSize": 10, "RequestId": "659F91C6-1949-43B0-90C4-B6342CA757D5", "Snapshots": { "Snapshot": [ { "CreationTime": "2020-05-14T04:36:48Z", "Status": "accomplished", "SnapshotName": "test-snapshot", "SourceDiskId": "d-bp1dhjo2g81jgw8v****", "SourceDiskType": "data", "SnapshotId": "s-bp1afnc98zv6x9ep****", "SourceDiskSize": "40" } ] } } When the value of AliyunECSShareEncryptSnapshotDefaultRoleShare encrypted resources across accounts is , the snapshot is created.

Snapshot

Share a snapshot in the console

Step 1: The sharer shares a snapshot

The sharer navigates to the snapshot sharing page.
1. Go to ECS console - Snapshots.
2. In the top navigation bar, select the region and resource group of the resource that you want to manage.
3. On the Disk Snapshots tab, locate the snapshot you want to share. In the Actions column, choose > Share Snapshot.
In the Add To Resource Share dialog box, configure the parameters for sharing the snapshot.
1. For Add Method, select Select From Existing or Create Resource Share.
  Note
  Snapshot sharing is based on the resource sharing feature of Resource Management. You can add shared resources and principals to a resource share to share your resources with other members.
2. (Required) Set Principal Scope. This parameter is required only when Add Method is set to Create Resource Share.
  - Allow Sharing With Any Account: You can share the snapshot with any principal.
  - Allow Sharing Only Within Resource Directory: You can share the snapshot only within the resource directory. This means that the management account or members of the resource directory can share the snapshot only with the resource directory and the folders and members in the resource directory.
3. Click Add Principal, configure the principal information based on the sharing scenario, and then click OK.
  - Scenario 1: Share the snapshot with another Alibaba Cloud account
    For Principal Type, select Alibaba Cloud Account and enter the ID of the Alibaba Cloud account with which you want to share the snapshot.
    Note
    If Principal Scope is set to Allow Sharing Only Within Resource Directory, you can select only Alibaba Cloud accounts within the resource directory.
    If you want to share the snapshot with multiple Alibaba Cloud accounts, you must add them one by one.
  - Scenario 2: Share the snapshot within an enterprise organization based on a resource directory
    - If Resource Directory is not enabled for your Alibaba Cloud account but your account is a member of a resource directory: In the Add Principal dialog box, select Resource Directory Organization or Folder (Organizational Unit). If you select Folder (Organizational Unit), you must enter the folder ID.
    - If Resource Directory is enabled for your Alibaba Cloud account: In the Add Principal dialog box, select or manually add resource directories or folders from the resource directory.
    Note
    You can also share a snapshot based on a resource directory in the Resource Management console. For more information, see Manage shared resources as a resource owner.
    If you share a snapshot with an entire resource directory (or a folder), all accounts in the resource directory (or the folder) can access the shared snapshot. When a new account joins the resource directory (or the folder), the system automatically shares the snapshot with the new account. When an account is removed from the resource directory (or the folder), the system automatically unshares the snapshot from the account.
4. After you add the principals, click OK.

The Snapshot

This topic describes how to use the Alibaba Cloud Toolkit for IntelliJ IDEA to deploy applications to Alibaba Cloud Container Service for Kubernetes (ACK). Prerequisites Before you deploy applications to ACK, make sure that the following requirements are met: You have created an ACK cluster. For more information, see Create an ACK managed cluster. You have installed the Alibaba Cloud Toolkit for IntelliJ IDEA plug-in. For more information, see Install the Alibaba Cloud Toolkit for IntelliJ IDEA plug-in. You have configured an account to log on to the Alibaba Cloud Toolkit for IntelliJ IDEA. For more information, see Configure an account.

(Required) The sharee must accept the shared snapshot. This operation is required if you select an existing resource share or create a resource share for the first time.
1. The Resource Sharing console (ECS) console provides a user-friendly interface for you to create and manage ECS instances. This topic describes how to log on to the ECS console.
2. Resource Sharing >Shared With Me
3. In the upper-left corner of the top navigation bar, select the region where the shared snapshot resides.
4. Shared With MeAcceptStatus
5. Accept Resource ShareOK
  This topic describes how to create a resource share. After you create a resource share, you can share resources with other accounts. A resource share is a container that allows you to share resources with other accounts. You can add resources to a resource share and specify the accounts with which you want to share the resources. After you share resources with other accounts, the accounts can use the resources in the same way as they use their own resources. For more information about resource sharing, see What is Resource Sharing? Prerequisites You have resources that can be shared. For more information about the resources that can be shared, see Shareable resources. Procedure Log on to the Resource Sharing console. In the left-side navigation pane, click Resource Shares. In the upper-right corner of the page, click Create Resource Share. In the Create Resource Share panel, configure the parameters. Click OK. What to do next After you create a resource share, you can add resources to the resource share and share the resources with other accounts. For more information, see Add resources to a resource share and Share resources with other accounts.
View the shared snapshot.
1. The sharee visits the ECS console - Snapshots.
2. In the upper-left corner of the top navigation bar, select the region where the shared snapshot resides.
3. This topic describes how to use the Alibaba Cloud CDN console to add a domain name to Alibaba Cloud CDN.
  - The Alibaba Cloud Elasticsearch console provides a comprehensive overview of your Elasticsearch clusters. This console allows you to efficiently manage and monitor your clusters through a user-friendly interface.
  - Snapshot Source column displays Shared Snapshot.
  - Properties
    You can also choose Operation View Shared Snapshots in the column of the shared snapshot to view the sharing information in the Resource sharing console.
(Optional) The sharee can create a data disk from the shared snapshot or copy the shared snapshot.
Note
- If you share an encrypted snapshot, the recipient must change the key when creating a disk from the shared snapshot or copying the shared snapshot.
- When the sharee creates a disk from a shared encrypted snapshot, they can select only enhanced SSDs (ESSDs), ESSD AutoPL disks, or ESSD Entry disks. If the sharee wants to create other types of disks, they must first copy the snapshot and then create disks from the snapshot copy.

Share a snapshot by using an SDK

This section describes how to share a snapshot across Alibaba Cloud accounts and create a cloud disk from the shared snapshot using an ECS SDK and a Resource Sharing SDK. This example uses the Java SDKs and an open source sample project.

Obtain the sample project: Share Snapshot Sample.
The project contains the following API operations:
- CreateResourceShare.
- ReceiveResourceShare: The resource recipient accepts the invitation to use the shared snapshot.
- UseResourceShare
Configure the sample project.
1. Configure SDK dependencies in the pom.xml file. For more information, see Java SDK examples.
```

<dependency>
  <groupId>com.aliyun</groupId>
  <artifactId>resourcesharing20200110</artifactId>
  <version>${lastVersion}</version>
</dependency>

<dependency>
  <groupId>com.aliyun</groupId>
  <artifactId>alibabacloud-ecs20140526</artifactId>
  <version>${lastVersion}</version>
</dependency>
```
  Note
  This topic describes how to use the Python SDK to consume data from Log Service. The Python SDK for Log Service provides two consumption methods: High-level consumer: Consumes data by using consumer groups. It supports automatic load balancing among multiple consumers, provides checkpoints, and allows you to focus only on the consumption logic. Low-level consumer: Consumes data by pulling shards. You need to handle the relationship between shards and consumers, load balancing, and checkpoints. For more information, see SDK overview.
2. ALIBABA_CLOUD_ACCESS_KEY_IDALIBABA_CLOUD_ACCESS_KEY_SECRET
3. Replace the values of other variables in the project with the actual values as needed, such as the ID of the snapshot that you want to share, the UID of the account with which you want to share the snapshot, and the category of the disk that you want to create.
You can compile and run each Java code snippet as needed.
Check the execution results in the corresponding console.
Resource Sharing console ECS console

Snapshot

The Snapshot feature allows you to create point-in-time copies of your disk data. You can use snapshots to back up data or create custom images.

Considerations

Alibaba Cloud Elastic Compute Service (ECS) is a cloud service that provides elastic computing power. ECS eliminates the need to invest in hardware upfront and allows you to quickly scale computing resources on demand. This helps you reduce IT maintenance costs and focus on innovations in your business.

The sharee can no longer view the snapshot in the ECS console or by calling an API operation.
The sharee cannot reinitialize the data disk that was created from the shared snapshot.
The Elastic Compute Service (ECS) is a high-performance, stable, reliable, and scalable IaaS-level cloud computing service provided by Alibaba Cloud. ECS eliminates the need to invest in physical servers upfront and allows you to scale computing resources on demand, making O&M more efficient. ECS enables you to focus on your core business innovation.

Procedure

You can navigate to the snapshot sharing page.
1. Go to ECS console - Snapshots.
2. In the top navigation bar, select the region and resource group of the resource that you want to manage.
3. ActionsShare Snapshot
You can unshare the snapshot.
1. In the Principals section, click Edit.
2. In the Actions column of the added principal, click Remove.
3. Click OK to stop sharing the snapshot.