AWS Security ChangesHomeSearch

AWS dms documentation change

Service: dms · 2025-12-25 · Documentation low

File: dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md

Summary

Added two new premigration assessments: 1) Verifying at least one selected object exists in source database, 2) Verifying secondary constraints/indexes exist in source database

Security assessment

The changes add routine validation checks for migration tasks but contain no evidence of addressing security vulnerabilities. The new checks focus on object existence and constraint validation for migration reliability, not security controls or vulnerabilities.

Diff

diff --git a/dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md b/dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
index 830e3c107..fc472c00f 100644
--- a//dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
+++ b//dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
@@ -5 +5 @@
-Validate if secondary indexes are enabled on the target database during full-load Validate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if target database has any triggers enabled on tables in the scope of the taskCheck if tables in task scope contain computed columnsCheck if tables in task scope have column store indexesCheck if memory optimized tables are a part of the task scopeCheck if temporal tables are a part of the task scopeCheck if delayed durability is enabled at the database levelCheck if accelerated data recovery is enabled at the database levelCheck if table mapping has more than 10K tables with primary keysCheck if the source database has tables or schema names with special characters.Check if the source database has column names with masked dataCheck if the source database has encrypted backupsCheck if the source database has backups stored at a URL or on Windows Azure. Check if the source database has backups on multiple disksCheck if the source database has at least one full backupCheck if the source database has sparse columns and columnar structure compression.Check if the source database instance has server level auditing for SQL Server 2008 or SQL Server 2008 R2Check if the source database has geometry columns for full LOB modeCheck if the source database has columns with the Identity property.Check if the DMS user has FULL LOAD permissionsCheck if the DMS user has FULL LOAD and CDC or CDC only permissionsCheck whether the ignoreMsReplicationEnablement ECA is set when using MS-CDC with on-premises or EC2 databasesCheck if the DMS user has the VIEW DEFINITION permission.Check if the DMS user has the VIEW DATABASE STATE permission on the MASTER database for users without the Sysadmin role.Check if the DMS user has the VIEW SERVER STATE permission.Validate if text repl size parameter is not unlimitedValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target when batch apply enabledValidate if table has primary key or unique index when DMS validation is enabledValidate if AWS DMS user has necessary privileges to the targetRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneously
+Validate if secondary indexes are enabled on the target database during full-load Validate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if target database has any triggers enabled on tables in the scope of the taskCheck if tables in task scope contain computed columnsCheck if tables in task scope have column store indexesCheck if memory optimized tables are a part of the task scopeCheck if temporal tables are a part of the task scopeCheck if delayed durability is enabled at the database levelCheck if accelerated data recovery is enabled at the database levelCheck if table mapping has more than 10K tables with primary keysCheck if the source database has tables or schema names with special characters.Check if the source database has column names with masked dataCheck if the source database has encrypted backupsCheck if the source database has backups stored at a URL or on Windows Azure. Check if the source database has backups on multiple disksCheck if the source database has at least one full backupCheck if the source database has sparse columns and columnar structure compression.Check if the source database instance has server level auditing for SQL Server 2008 or SQL Server 2008 R2Check if the source database has geometry columns for full LOB modeCheck if the source database has columns with the Identity property.Check if the DMS user has FULL LOAD permissionsCheck if the DMS user has FULL LOAD and CDC or CDC only permissionsCheck whether the ignoreMsReplicationEnablement ECA is set when using MS-CDC with on-premises or EC2 databasesCheck if the DMS user has the VIEW DEFINITION permission.Check if the DMS user has the VIEW DATABASE STATE permission on the MASTER database for users without the Sysadmin role.Check if the DMS user has the VIEW SERVER STATE permission.Validate if text repl size parameter is not unlimitedValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target when batch apply enabledValidate if table has primary key or unique index when DMS validation is enabledValidate if AWS DMS user has necessary privileges to the targetRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyValidate that at least one selected object exists in the source databaseValidate that secondary constraints and indexes (non-primary) are present in the source database
@@ -88,0 +89,4 @@ This section describes individual premigration assessments for migration tasks t
+  * Validate that at least one selected object exists in the source database
+
+  * Validate that secondary constraints and indexes (non-primary) are present in the source database
+
@@ -398,0 +403,12 @@ This premigration assessment verifies that Data Validation setting and Data Mask
+## Validate that at least one selected object exists in the source database
+
+**API key** : `all-check-source-selection-rules`
+
+This premigration assessment verifies that at least one object specified in the selection rules exists in the source database, including pattern matching for wildcard-based rules.
+
+## Validate that secondary constraints and indexes (non-primary) are present in the source database
+
+**API key** : `all-check-secondary-constraints`
+
+This premigration assessment verifies that secondary constraints and indexes (foreign keys, check constraints, non-clustered indexes) are present in the source database.
+