AWS dms documentation change
Summary
Added sections on network configurations using VPC endpoints and internet access for AWS services, including security benefits of VPC endpoints
Security assessment
The addition of VPC endpoint documentation promotes secure connectivity by avoiding internet exposure, which is a security best practice. This enhances security awareness but does not address a specific vulnerability.
Diff
diff --git a/dms/latest/userguide/CHAP_ReplicationInstance.VPC.md b/dms/latest/userguide/CHAP_ReplicationInstance.VPC.md index da0a8a7b8..50cf4433e 100644 --- a//dms/latest/userguide/CHAP_ReplicationInstance.VPC.md +++ b//dms/latest/userguide/CHAP_ReplicationInstance.VPC.md @@ -36,0 +37,6 @@ You can use several different network configurations with AWS Database Migration + * Configuration for a network connecting to AWS services + + * Configuration for a network connecting to AWS services using VPC endpoints + + * Configuration for a network connecting to AWS services using the internet + @@ -256,0 +263,46 @@ To set up a proxy server on an EC2 Classic instance +### Configuration for a network connecting to AWS services + +To connect with AWS services, use either an internet connection or Virtual Private Cloud (VPC) endpoints. This applies when: + +Your source or target endpoints use AWS services like: + + + * AWS Secrets Manager + + * Amazon Simple Storage Service + + + + +Your target endpoint is an AWS service such as: + + + * Amazon S3 + + * Amazon Kinesis + + * Amazon DynamoDB + + * Amazon Redshift + + * Amazon OpenSearch Service + + * Amazon Athena + + + + +### Configuration for a network connecting to AWS services using VPC endpoints + +VPC endpoints provide secure connections between your AWS resources, connecting VPC resources to AWS services without requiring internet access. Your applications in private subnets can access AWS services while staying within the AWS network, improving security and reducing latency. Please refer to the image below: + + + +For more information, see [Configuring VPC endpoints as AWS DMS source and target endpoints](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_VPC_Endpoints.html) and [Configuring AWS DMS secrets manager VPC Endpoint](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Advanced.Endpoints.secretsmanager.html). + +### Configuration for a network connecting to AWS services using the internet + +A replication instance needs internet access to connect with AWS resources during data migration. + +For more information regarding private and public subnets within a VPC, see [Example: VPC with servers in private subnets and NAT](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-example-private-subnets-nat.html) in the _Amazon Virtual Private Cloud User Guide_. You must ensure to test your network configuration for connectivity with any required service. +