AWS mgn documentation change

Service: mgn · 2026-05-07 · Documentation medium

File: mgn/latest/ug/preparing-environments.md

Summary

Added Active Directory connectivity requirements and updated firewall images

Security assessment

Adds security-related documentation for domain-joined servers (AD connectivity/DNS requirements) and updates firewall configuration images. Enhances security posture documentation but doesn't address specific vulnerabilities.

Diff

diff --git a/mgn/latest/ug/preparing-environments.md b/mgn/latest/ug/preparing-environments.md
index 9d3c5bcc5..653e6a0f6 100644
--- a//mgn/latest/ug/preparing-environments.md
+++ b//mgn/latest/ug/preparing-environments.md
@@ -45,0 +46,2 @@ As part of network setting preparations, set up a staging area and operational s
+  * Active Directory connectivity
+
@@ -71,0 +74,6 @@ Test and cutover instances are launched in a subnet you specify in the Amazon EC
+### Active Directory connectivity
+
+If your source servers are domain-joined to an Active Directory, ensure that the target VPC has network connectivity and DNS resolution to your AD domain controllers before launching test or cutover instances. During conversion, Application Migration Service resets network settings to use DHCP, which means instance-level DNS overrides from the source server are not preserved.
+
+For details on configuring DNS and network connectivity for domain-joined servers, see [Target instance cannot connect to Active Directory after migration](./ad-connectivity-after-migration.html).
+
@@ -242 +250 @@ These instructions are intended for the default OS firewall and allow outbound c
-![Outbound Rules table showing network configurations, with BranchCache entries highlighted.](/images/mgn/latest/ug/images/network-requirements-1-re.png)
+![Windows Defender Firewall with Advanced Security console with Outbound Rules option highlighted in the tree.](/images/mgn/latest/ug/images/network-requirements-1-re.png)
@@ -246 +254 @@ These instructions are intended for the default OS firewall and allow outbound c
-![Outbound Rules table showing various network rules with Enabled status highlighted.](/images/mgn/latest/ug/images/network-requirements-2-re.png)
+![Outbound Rules table with BranchCache Hosted Cache Client rule highlighted showing Enabled status and Remote Port 443.](/images/mgn/latest/ug/images/network-requirements-2-re.png)
@@ -250 +258 @@ These instructions are intended for the default OS firewall and allow outbound c
-![Outbound Rules table with BranchCache Hosted Cache Client rule highlighted and Enable Rule option.](/images/mgn/latest/ug/images/network-requirements-3-re.png)
+![Context menu showing Enable Rule option highlighted for a disabled outbound rule.](/images/mgn/latest/ug/images/network-requirements-3-re.png)