AWS transform documentation change
Summary
Updated IaC template options and added security group validation warning
Security assessment
Added explicit warning about reviewing security group configurations, but does not address a specific disclosed vulnerability
Diff
diff --git a/transform/latest/userguide/transform-vmware-migrate-network.md b/transform/latest/userguide/transform-vmware-migrate-network.md index 9da494bbb..a611ffb3c 100644 --- a//transform/latest/userguide/transform-vmware-migrate-network.md +++ b//transform/latest/userguide/transform-vmware-migrate-network.md @@ -40 +40 @@ Once the target network is generated, review the generated network configuration -AWS Transform provides multiple generators for creating network infrastructure code from your migrated network configuration. These are available to you in the **Migrate Network** task, after you **Generate VPC configuration** and **Review generated VPC configuration**. When you choose the **Deploy on my own** option, in addition to AWS CloudFormation template options you can choose: +AWS Transform provides multiple generators for creating network infrastructure code from your migrated network configuration. These are available to you in the **Migrate Network** task, after you **Generate VPC configuration** and **Review generated VPC configuration**. When you choose the **Deploy on my own** option AWS Transform for VMware gives you the option to generate Infrastructure-as-Code (IaC) templates in three formats: @@ -42 +42 @@ AWS Transform provides multiple generators for creating network infrastructure c - * **HashiCorp Terraform** \- Infrastructure as Code (IaC) templates generated in HashiCorp Configuration Language (HCL) for managing network resources + * **AWS CloudFormation** templates @@ -45,0 +46,2 @@ AWS Transform provides multiple generators for creating network infrastructure c + * **HashiCorp Terraform** \- Infrastructure as Code (IaC) templates generated in HashiCorp Configuration Language (HCL) for managing network resources + @@ -183 +185,7 @@ Learn more about how to tag network resources in [Tag your VPCs and subnets](./t -When you migrate networks from an NSX source environment, AWS Transform creates security groups based on your source environment configurations. AWS Transform converts the following NSX configurations to security groups: +When you migrate networks from an NSX source environment, AWS Transform creates security groups based on your source environment configurations. + +###### Important + +AWS Transform makes a best effort to create security groups that match your source environment. It is your responsibility to review and, if necessary, modify the security groups to ensure that they meet your company's needs and security policies. + +AWS Transform converts the following NSX configurations to security groups: