If network resources connected to your CCN no longer need to communicate with a CEN instance from another account, you can revoke the authorization for that CEN instance.
Background
Before you revoke authorization for another account's CEN instance, note the following:
-
If the other account has already disassociated your CCN instance from their CEN instance, you can revoke the authorization by following the steps in this topic. After you revoke the authorization, you can associate your CCN instance with another CEN instance.
-
If the other account has not disassociated your CCN instance from their CEN instance, you can still revoke the authorization. However, after you revoke the authorization, the other account must still disassociate your CCN instance from their CEN instance. You can then associate your CCN instance with a different CEN instance.
We recommend that you ask the other account to disassociate their CEN instance from your CCN instance before you revoke the authorization. They must perform this action in the CEN console. For more information, see Disassociate a network instance.
Procedure
-
Log in to the SAG console.
-
In the left-side navigation pane, click CCN.
-
In the top navigation bar, select the target region.
-
On the CCN page, find the CCN instance and click its ID.
-
On the CCN instance details page, click the CEN Cross Account Authorization Information tab.
-
Find the CEN instance and click Revoke Authorization in the Operation column.
-
In the dialog box, review the details and click OK.