AWS transform documentation change
Summary
Added new section 'Requirements for externally hosted databases' with prerequisites and setup steps for connecting to external SQL Server databases
Security assessment
This change adds documentation about securely connecting to externally hosted databases, including using AWS Secrets Manager for credentials and configuring network connectivity through VPC and security groups. While it provides security best practices, there's no evidence it addresses a specific security vulnerability.
Diff
diff --git a/transform/latest/userguide/sql-server-setup.md b/transform/latest/userguide/sql-server-setup.md index 58641aaf7..fb01b9059 100644 --- a//transform/latest/userguide/sql-server-setup.md +++ b//transform/latest/userguide/sql-server-setup.md @@ -5 +5 @@ -Database setup and configuration +Database setup and configurationRequirements for externally hosted databases @@ -346,0 +347,22 @@ Ensure your VPC can communicate with: +## Requirements for externally hosted databases + +If your SQL Server database is hosted outside of AWS, ensure the following prerequisites are met and then complete the setup steps before you begin the modernization. + +**Prerequisites** + + * An AWS account with a VPC + + * Network connectivity between the VPC and the external database. For information about configuring network connectivity, see [Configuring network connectivity](https://docs.aws.amazon.com/dms/latest/userguide/instance-profiles-network.html) in the AWS DMS User Guide. + + + + +**Setup steps** + + 1. Create a secret in AWS Secrets Manager with the connection details for the external database. For more information, see Step 2: Store credentials in AWS Secrets Manager. + + 2. When prompted, provide the VPC ID and security group ID for connecting to the external database. AWS Transform prompts you for this information because the database hostname in the secret cannot be resolved within the AWS account. + + + +