AWS Security ChangesHomeSearch

AWS keyspaces documentation change

Service: keyspaces · 2025-08-16 · Documentation low

File: keyspaces/latest/devguide/migration-online-dw.md

Summary

Added documentation for ZDM Dual Write Proxy migration solution, including deployment via AWS CloudFormation, Docker/ECS Fargate, and system compatibility details.

Security assessment

The changes describe migration infrastructure and deployment best practices but do not address security vulnerabilities or explicitly document security features. Enhancements like container deployment and IaC are operational improvements, not security-specific.

Diff

diff --git a/keyspaces/latest/devguide/migration-online-dw.md b/keyspaces/latest/devguide/migration-online-dw.md
index 293e83bfe..02f6a63d9 100644
--- a//keyspaces/latest/devguide/migration-online-dw.md
+++ b//keyspaces/latest/devguide/migration-online-dw.md
@@ -7 +7,21 @@
-The first step in an online migration plan is to ensure that any new data written by the application is stored in both databases, your existing Cassandra cluster and Amazon Keyspaces. The goal is to provide a consistent view across the two data stores. You can do this by applying all new writes to both databases. To implement dual writes, consider one of the following two options.
+The first step in an online migration plan is to ensure that any new data written by the application is stored in both databases, your existing Cassandra cluster and Amazon Keyspaces. The goal is to provide a consistent view across the two data stores. You can do this by applying all new writes to both databases. To implement dual writes, consider one of the following three options.
+
+  * **ZDM Dual Write Proxy for Amazon Keyspaces Migration** – Using the ZDM Proxy for Amazon Keyspaces available on [Github](https://github.com/aws-samples/amazon-keyspaces-examples/blob/main/migration/online/zdm-proxy/README.md), you can migrate your Apache Cassandra workloads to Amazon Keyspaces without application downtime. This enhanced solution implements AWS best practices and extends the official ZDM Proxy capabilities.
+
+    * Perform online migrations between Apache Cassandra and Amazon Keyspaces.
+
+    * Write data to both source and target tables simultaneously without refactoring applications.
+
+    * Validate queries through dual-read operations.
+
+The solution offers the following enhancements to work with AWS and Amazon Keyspaces.
+
+    * **Container deployment** – Use a pre-configured Docker image from Amazon Elastic Container Registry (Amazon ECR) for VPC-accessible deployments.
+
+    * **Infrastructure as code** – Deploy using AWS CloudFormation templates for automated setup on AWS Fargate.
+
+    * **Amazon Keyspaces compatibility** – Access system tables with custom adaptations for Amazon Keyspaces.
+
+The solution runs on Amazon ECS with Fargate, providing serverless scalability based on your workload demands. A network load balancer distributes incoming application traffic across multiple Amazon ECS tasks for high availability.
+
+![Implementing the ZDM dual write proxy for migrating data from Apache Cassandra to Amazon Keyspaces.](/images/keyspaces/latest/devguide/images/migration/online-migration-zdm.png)