An AttachResource(ResourceContainerURN, ResourceURN) request, in an embodiment, causes the resource container service 106 to attach a resource, specified by a name such as ResourceURN, to a resource container, specified by a name corresponding to the container, such as ResourceContainerURN, to which the resource is to be attached. Upon receipt of a request, the resource container service 106 may determine if the resource identified by ResourceURN exists. In some examples, ResourceURN may be an identifier that specifies a resource that exists on various other systems and or services, such as a key management service, a database service, a computing resource service, a storage service, and/or variations thereof.
In some embodiments, the URN can be a resource located external (e.g., with a third party provider) to the computing resource service provider that provides the resource container service. Additionally or alternatively, the ResourceURN may also specify another resource container; in this manner, the policies associated with the ResourceURN may also govern the resources assigned to the other resource container. The resource container service 106 may call the platform data store 112 to store ResourceURN along with the other data stored for the resource container specified by ResourceContainerURN. In some examples, the platform data store 112 may associate ResourceURN with the resource container in a database that the platform data store 112 may comprise; the database may indicate that the resource specified by ResourceURN is part of the resource container.