AWS transform documentation change
Summary
Added architecture section with diagram and emphasized user responsibility to review network configurations for security/compliance
Security assessment
Added warning about validating configurations for security/compliance requirements, but no evidence of addressing a specific vulnerability
Diff
diff --git a/transform/latest/userguide/transform-app-vmware.md b/transform/latest/userguide/transform-app-vmware.md index e72b705d1..57dad789a 100644 --- a//transform/latest/userguide/transform-app-vmware.md +++ b//transform/latest/userguide/transform-app-vmware.md @@ -5 +5 @@ -Capabilities and key featuresLimitations +Capabilities and key featuresArchitectureLimitations @@ -33,0 +34,6 @@ AWS Transform supports migrating Windows and Linux servers of supported operatin +## AWS Transform VMware migration architecture + +This diagram displays an overview of AWS Transform VMware migration architecture. + + + @@ -38,2 +43,0 @@ AWS Transform has the following limitations: - * AWS Transform does not support using Amazon Elastic Compute Cloud Dedicated Hosts or the Bring Your Own License (BYOL) licensing model. You may decide to switch tenancy and use BYOL licenses after you launch Amazon EC2 instances. For information, see [License type conversions in License Manager](https://docs.aws.amazon.com/license-manager/latest/userguide/license-conversion.html) in the _License Manager User Guide_. - @@ -46 +49,0 @@ AWS Transform has the following limitations: - * AWS Transform can execute a single network migration job for a given target AWS account and AWS Region at a time. When you generate a VPC configuration during the network migration step of your job, if other jobs are concurrently performing a network migration for the same account and Region, AWS Transform will delete the metadata associated with those other network migrations, and that might cause those other jobs to fail. For NSX environment migrations, this means AWS Transform cannot automatically associate security groups with migrated servers. However, any network resources (such as VPCs, Subnets, and security groups) already deployed to your target account and Region won't be deleted. We recommend you complete the first job before generating a VPC configuration in another job for the same target account and Region. @@ -49,0 +53,3 @@ AWS Transform has the following limitations: +###### Important + +AWS Transform generates network configurations and migration strategies based on your environment assessment. Review these configurations with stakeholders to ensure that they meet your organization's security, compliance, and business requirements. While AWS Transform provides automated configuration recommendations, you are responsible for validating and adjusting the settings to match your security and compliance needs before proceeding with migration.