AWS mgn documentation change
Summary
Updated service name references from 'AWS Application Migration Service' to 'AWS Transform MGN' throughout the document, including policy descriptions and section headers.
Security assessment
Changes are purely rebranding of the service name without modifying security content. Policy names and permissions remain unchanged. No evidence of security vulnerability fixes or new security features.
Diff
diff --git a/mgn/latest/ug/security-iam-awsmanpol.md b/mgn/latest/ug/security-iam-awsmanpol.md index 24ffa368d..f48ea2994 100644 --- a//mgn/latest/ug/security-iam-awsmanpol.md +++ b//mgn/latest/ug/security-iam-awsmanpol.md @@ -5 +5 @@ -[Documentation](/index.html)[Application Migration Service](/mgn/index.html)[User Guide](what-is-mgn.html) +[Documentation](/index.html)[AWS Transform MGN](/mgn/index.html)[User Guide](what-is-mgn.html) @@ -11 +11 @@ NEW - You can now accelerate your migration and modernization with AWS Transform -# AWS managed policies for AWS Application Migration Service +# AWS managed policies for AWS Transform MGN @@ -21 +21 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM -## Application Migration Service updates for AWS managed policies +## MGN updates for AWS managed policies @@ -23 +23 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM -View details about updates to AWS managed policies for AWS Application Migration Service since March 1, 2021. +View details about updates to AWS managed policies for AWS Transform MGN since March 1, 2021. @@ -27 +27 @@ Change | Description | Date -[AWSApplicationMigrationFullAccess](./security-iam-awsmanpol-AWSApplicationMigrationFullAccess.html#security-iam-awsmanpol-AWSApplicationMigrationFullAccess.title) – Updated policy [AWSApplicationMigrationReplicationServerPolicy](./security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.title) – Updated policy [AWSApplicationMigrationFSxProxyPolicy](./security-iam-awsmanpol-AWSApplicationMigrationFSxProxyPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationFSxProxyPolicy.title) – New policy [AWSApplicationMigrationFSxProxyVPCPolicy](./security-iam-awsmanpol-AWSApplicationMigrationFSxProxyVPCPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationFSxProxyVPCPolicy.title) – New policy | Updated the AWSApplicationMigrationFullAccess policy to support FSx for ONTAP storage virtual machine operations. Updated the AWSApplicationMigrationReplicationServerPolicy policy to support snapshot group operations. Created new AWSApplicationMigrationFSxProxyPolicy policy to provide permissions to manage ONTAP file systems. Created new AWSApplicationMigrationFSxProxyVPCPolicy policy to provide permissions to manage PrivateLink between AWS Application Migration Service and customer's FSx file system. | May 31, 2026 +[AWSApplicationMigrationFullAccess](./security-iam-awsmanpol-AWSApplicationMigrationFullAccess.html#security-iam-awsmanpol-AWSApplicationMigrationFullAccess.title) – Updated policy [AWSApplicationMigrationReplicationServerPolicy](./security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.title) – Updated policy [AWSApplicationMigrationFSxProxyPolicy](./security-iam-awsmanpol-AWSApplicationMigrationFSxProxyPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationFSxProxyPolicy.title) – New policy [AWSApplicationMigrationFSxProxyVPCPolicy](./security-iam-awsmanpol-AWSApplicationMigrationFSxProxyVPCPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationFSxProxyVPCPolicy.title) – New policy | Updated the AWSApplicationMigrationFullAccess policy to support FSx for ONTAP storage virtual machine operations. Updated the AWSApplicationMigrationReplicationServerPolicy policy to support snapshot group operations. Created new AWSApplicationMigrationFSxProxyPolicy policy to provide permissions to manage ONTAP file systems. Created new AWSApplicationMigrationFSxProxyVPCPolicy policy to provide permissions to manage PrivateLink between AWS Transform MGN and customer's FSx file system. | May 31, 2026 @@ -29 +29 @@ Change | Description | Date -[AWSApplicationMigrationNetworkMigrationCustomResource](./security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationCustomResource.html#security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationCustomResource.title) – New policy | Application Migration Service added a new policy that provides permissions for Network Migration custom resource. This identity-based policy allows modification of Transit Gateway resources that were specifically created by Application Migration Service. | December 2, 2025 +[AWSApplicationMigrationNetworkMigrationCustomResource](./security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationCustomResource.html#security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationCustomResource.title) – New policy | MGN added a new policy that provides permissions for Network Migration custom resource. This identity-based policy allows modification of Transit Gateway resources that were specifically created by MGN. | December 2, 2025 @@ -36 +36 @@ Updated the [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSAppl -[AWSApplicationMigrationServiceEc2InstancePolicy ](./security-iam-awsmanpol-AWSApplicationMigrationServiceEc2InstancePolicy.html#security-iam-awsmanpol-AWSApplicationMigrationServiceEc2InstancePolicy.title)– New policy | This policy allows installing and using the AWS Replication Agent, which is used by AWS Application Migration Service (Application Migration Service) to migrate source servers that run on EC2 (cross-Region or cross-AZ). An IAM role with this policy should be attached (as an EC2 Instance Profile) to the EC2 Instances. | August 21, 2023 +[AWSApplicationMigrationServiceEc2InstancePolicy ](./security-iam-awsmanpol-AWSApplicationMigrationServiceEc2InstancePolicy.html#security-iam-awsmanpol-AWSApplicationMigrationServiceEc2InstancePolicy.title)– New policy | This policy allows installing and using the AWS Replication Agent, which is used by AWS Transform MGN to migrate source servers that run on EC2 (cross-Region or cross-AZ). An IAM role with this policy should be attached (as an EC2 Instance Profile) to the EC2 Instances. | August 21, 2023 @@ -43 +43 @@ Updated the [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSAppl -[AWSApplicationMigrationAgentInstallationPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationAgentInstallationPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationAgentInstallationPolicy.title)– New policy | Application Migration Service added a new policy. This policy allows installing the AWS Replication Agent, which is used with Application Migration Service to migrate source servers to AWS. Attach this policy to your users or roles whose credentials you provide during the installation step of the AWS Replication Agent. The installed AWS Replication Agent will communicate with Application Migration Service using the recommended strong authentication method. | June 15, 2022 +[AWSApplicationMigrationAgentInstallationPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationAgentInstallationPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationAgentInstallationPolicy.title)– New policy | MGN added a new policy. This policy allows installing the AWS Replication Agent, which is used with Application Migration Service to migrate source servers to AWS. Attach this policy to your users or roles whose credentials you provide during the installation step of the AWS Replication Agent. The installed AWS Replication Agent will communicate with AWS Transform MGN using the recommended strong authentication method. | June 15, 2022 @@ -45 +45 @@ Updated the [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSAppl -[AWSApplicationMigrationAgentPolicy_v2 ](./security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy_v2.html#security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy_v2.title)– New policy | AWS Application Migration Service added a new policy. This policy allows using the AWS Replication Agent, which is used with AWS Application Migration Service to migrate source servers to AWS. We do not recommend that you attach this policy to your users or roles. | May 10, 2022 +[AWSApplicationMigrationAgentPolicy_v2 ](./security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy_v2.html#security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy_v2.title)– New policy | AWS Transform MGN added a new policy. This policy allows using the AWS Replication Agent, which is used with AWS Transform MGN to migrate source servers to AWS. We do not recommend that you attach this policy to your users or roles. | May 10, 2022 @@ -47,8 +47,8 @@ Updated the [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSAppl -[AWSApplicationMigrationEC2Access ](./security-iam-awsmanpol-AWSApplicationMigrationEC2Access.html) – Updated policy | Updated the AWSApplicationMigrationEC2Access policy to add additional permissions and restrict certain existing permissions. This policy is only intended to be used for the Application Migration Service console. The restriction prevents certain requests from being called directly by the calling identity, whilst enabling an AWS Application Migration Service (Application Migration Service) to make the request to EC2 on behalf of the calling identity. | March 2, 2022 -[AWSApplicationMigrationServiceRolePolicy ](./security-iam-awsmanpol-AWSApplicationMigrationServiceRolePolicy.html#security-iam-awsmanpol-AWSApplicationMigrationServiceRolePolicy.title)– Updated policy | AWS Application Migration Service added a new policy to allow AWS Application Migration Service to manage AWS resources on your behalf. | December 15, 2021 -[AWSApplicationMigrationVCenterClientPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationVCenterClientPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationVCenterClientPolicy.title)– New policy | AWS Application Migration Service added a new policy that allows the installation and usage of the AWS vCenter Appliance. | November 7, 2021 -[AWSApplicationMigrationAgentPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy.title)– New policy | AWS Application Migration Service added a new policy to allow the installation of the AWS Replication Agent on source servers. | April 18, 2021 -[AWSApplicationMigrationConversionServerPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationConversionServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationConversionServerPolicy.title)– New policy | AWS Application Migration Service added a new policy that allows AWS Application Migration Service to communicate with the service. | April 18, 2021 -[AWSApplicationMigrationMGHAccess ](./security-iam-awsmanpol-AWSApplicationMigrationMGHAccess.html#security-iam-awsmanpol-AWSApplicationMigrationMGHAccess.title)– New policy | AWS Application Migration Service added a new policy to allow AWS Application Migration Service access to your account's AWS Migration Hub | April 18, 2021 -[AWSApplicationMigrationReplicationServerPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.title)– New policy | AWS Application Migration Service added a new policy to allow the AWS Application Migration Service replication servers to communicate with the service, create and manage resources on your behalf. | April 7, 2021 -Application Migration Service started tracking changes | AWS Application Migration Service started tracking changes for AWS managed policies. | April 7, 2021 +[AWSApplicationMigrationEC2Access ](./security-iam-awsmanpol-AWSApplicationMigrationEC2Access.html) – Updated policy | Updated the AWSApplicationMigrationEC2Access policy to add additional permissions and restrict certain existing permissions. This policy is only intended to be used for the MGN console. The restriction prevents certain requests from being called directly by the calling identity, whilst enabling an AWS Transform MGN to make the request to EC2 on behalf of the calling identity. | March 2, 2022 +[AWSApplicationMigrationServiceRolePolicy ](./security-iam-awsmanpol-AWSApplicationMigrationServiceRolePolicy.html#security-iam-awsmanpol-AWSApplicationMigrationServiceRolePolicy.title)– Updated policy | AWS Transform MGN added a new policy to allow AWS Transform MGN to manage AWS resources on your behalf. | December 15, 2021 +[AWSApplicationMigrationVCenterClientPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationVCenterClientPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationVCenterClientPolicy.title)– New policy | AWS Transform MGN added a new policy that allows the installation and usage of the AWS vCenter Appliance. | November 7, 2021 +[AWSApplicationMigrationAgentPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationAgentPolicy.title)– New policy | AWS Transform MGN added a new policy to allow the installation of the AWS Replication Agent on source servers. | April 18, 2021 +[AWSApplicationMigrationConversionServerPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationConversionServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationConversionServerPolicy.title)– New policy | AWS Transform MGN added a new policy that allows AWS Transform MGN to communicate with the service. | April 18, 2021 +[AWSApplicationMigrationMGHAccess ](./security-iam-awsmanpol-AWSApplicationMigrationMGHAccess.html#security-iam-awsmanpol-AWSApplicationMigrationMGHAccess.title)– New policy | AWS Transform MGN added a new policy to allow AWS Transform MGN access to your account's AWS Migration Hub | April 18, 2021 +[AWSApplicationMigrationReplicationServerPolicy ](./security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.html#security-iam-awsmanpol-AWSApplicationMigrationReplicationServerPolicy.title)– New policy | AWS Transform MGN added a new policy to allow the AWS Transform MGN replication servers to communicate with the service, create and manage resources on your behalf. | April 7, 2021 +MGN started tracking changes | AWS Transform MGN started tracking changes for AWS managed policies. | April 7, 2021