AWS prescriptive-guidance documentation change
Summary
Updated all references from 'Application Migration Service' to 'MGN' or 'AWS Transform MGN' throughout the document, including titles, descriptions, prerequisites, and configuration steps. Service terminology was standardized.
Security assessment
The changes are purely branding/naming updates without modifying security configurations, requirements, or recommendations. The core security mechanisms (private network connections, VPC endpoints, port requirements) remain unchanged. No vulnerabilities or security improvements were addressed.
Diff
diff --git a/prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.md b/prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.md index e585a120d..4910cc5bd 100644 --- a//prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.md +++ b//prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.md @@ -9 +9 @@ SummaryPrerequisites and limitationsArchitectureToolsEpicsRelated resourcesAddit -# Connect to Application Migration Service data and control planes over a private network +# Connect to MGN data and control planes over a private network @@ -15 +15 @@ SummaryPrerequisites and limitationsArchitectureToolsEpicsRelated resourcesAddit -This pattern explains how you can connect to an AWS Application Migration Service data plane and control plane on a private, secured network by using interface VPC endpoints. +This pattern explains how you can connect to an AWS Transform MGN data plane and control plane on a private, secured network by using interface VPC endpoints. @@ -17 +17 @@ This pattern explains how you can connect to an AWS Application Migration Servic -Application Migration Service is a highly automated lift-and-shift (rehost) solution that simplifies, expedites, and reduces the cost of migrating applications to AWS. It enables companies to rehost a large number of physical, virtual, or cloud servers without compatibility issues, performance disruption, or long cutover windows. Application Migration Service is available from the AWS Management Console. This enables seamless integration with other AWS services, such as AWS CloudTrail, Amazon CloudWatch, and AWS Identity and Access Management (IAM). +MGN is a highly automated lift-and-shift (rehost) solution that simplifies, expedites, and reduces the cost of migrating applications to AWS. It enables companies to rehost a large number of physical, virtual, or cloud servers without compatibility issues, performance disruption, or long cutover windows. MGN is available from the AWS Management Console. This enables seamless integration with other AWS services, such as AWS CloudTrail, Amazon CloudWatch, and AWS Identity and Access Management (IAM). @@ -19 +19 @@ Application Migration Service is a highly automated lift-and-shift (rehost) solu -You can connect from a source data center to a data plane—that is, to a subnet that serves as a staging area for data replication in the destination VPC—over a private connection by using Site-to-Site VPN services, AWS Direct Connect, or VPC peering in Application Migration Service. You can also use [interface VPC endpoints](https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html) powered by AWS PrivateLink to connect to an Application Migration Service control plane over a private network. +You can connect from a source data center to a data plane—that is, to a subnet that serves as a staging area for data replication in the destination VPC—over a private connection by using Site-to-Site VPN services, AWS Direct Connect, or VPC peering in MGN. You can also use [interface VPC endpoints](https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html) powered by AWS PrivateLink to connect to an MGN control plane over a private network. @@ -25 +25 @@ You can connect from a source data center to a data plane—that is, to a subnet - * **Staging area subnet** – Before you set up Application Migration Service, create a subnet to be used as a staging area for data replicated from your source servers to AWS (that is, a data plane). You must specify this subnet in the [Replication Settings template](https://docs.aws.amazon.com/mgn/latest/ug/template-vs-server.html) when you first access the Application Migration Service console. You can override this subnet for specific source servers in the Replication Settings template. Although you can use an existing subnet in your AWS account, we recommend that you create a new, dedicated subnet for this purpose. + * **Staging area subnet** – Before you set up MGN, create a subnet to be used as a staging area for data replicated from your source servers to AWS (that is, a data plane). You must specify this subnet in the [Replication Settings template](https://docs.aws.amazon.com/mgn/latest/ug/template-vs-server.html) when you first access the MGN console. You can override this subnet for specific source servers in the Replication Settings template. Although you can use an existing subnet in your AWS account, we recommend that you create a new, dedicated subnet for this purpose. @@ -27 +27 @@ You can connect from a source data center to a data plane—that is, to a subnet - * **Network requirements** – The replication servers that are launched by Application Migration Service in your staging area subnet have to be able to send data to the Application Migration Service API endpoint at `https://mgn.<region>.amazonaws.com/`, where `<region>` is the code for the AWS Region you are replicating to (for example, `https://mgn.us-east-1.amazonaws.com`). Amazon Simple Storage Service (Amazon S3) service URLs are required for downloading Application Migration Service software. + * **Network requirements** – The replication servers that are launched by MGN in your staging area subnet have to be able to send data to the MGN API endpoint at `https://mgn.<region>.amazonaws.com/`, where `<region>` is the code for the AWS Region you are replicating to (for example, `https://mgn.us-east-1.amazonaws.com`). Amazon Simple Storage Service (Amazon S3) service URLs are required for downloading MGN software. @@ -29 +29 @@ You can connect from a source data center to a data plane—that is, to a subnet - * The AWS Replication Agent installer should have access to the Amazon Simple Storage Service (Amazon S3) bucket URL of the AWS Region you are using with Application Migration Service. + * The AWS Replication Agent installer should have access to the Amazon Simple Storage Service (Amazon S3) bucket URL of the AWS Region you are using with MGN. @@ -33 +33 @@ You can connect from a source data center to a data plane—that is, to a subnet - * The source servers on which the AWS Replication Agent is installed must be able to send data to the replication servers in the staging area subnet and to the Application Migration Service API endpoint at `https://mgn.<region>.amazonaws.com/`. + * The source servers on which the AWS Replication Agent is installed must be able to send data to the replication servers in the staging area subnet and to the MGN API endpoint at `https://mgn.<region>.amazonaws.com/`. @@ -43 +43 @@ Source data center| Amazon S3 service URLs| 443 (TCP)| [Communication over TCP p -Source data center| AWS Region-specific console address for Application Migration Service| 443 (TCP)| [Communication between the source servers and Application Migration Service over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Source-Manager-TCP-443) +Source data center| AWS Region-specific console address for MGN| 443 (TCP)| [Communication between the source servers and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Source-Manager-TCP-443) @@ -45 +45 @@ Source data center| Staging area subnet| 1500 (TCP)| [Communication between the -Staging area subnet| AWS Region-specific console address for Application Migration Service| 443 (TCP)| [Communication between the staging area subnet and Application Migration Service over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Communication-TCP-443-Staging) +Staging area subnet| AWS Region-specific console address for MGN| 443 (TCP)| [Communication between the staging area subnet and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Communication-TCP-443-Staging) @@ -51 +51 @@ Staging area subnet| Amazon Elastic Compute Cloud (Amazon EC2) endpoint of the s -Application Migration Service isn’t currently available in all AWS Regions and operating systems. +MGN isn’t currently available in all AWS Regions and operating systems. @@ -62 +62 @@ Application Migration Service isn’t currently available in all AWS Regions and -The following diagram illustrates the network architecture for a typical migration. For more information about this architecture, see the [Application Migration Service documentation](https://docs.aws.amazon.com/mgn/latest/ug/Network-Settings-Video.html) and the [Application Migration Service service architecture and network architecture video](https://youtu.be/ao8geVzmmRo). +The following diagram illustrates the network architecture for a typical migration. For more information about this architecture, see the [MGN documentation](https://docs.aws.amazon.com/mgn/latest/ug/Network-Settings-Video.html) and the [MGN service architecture and network architecture video](https://youtu.be/ao8geVzmmRo). @@ -66 +66 @@ The following diagram illustrates the network architecture for a typical migrati -The following detailed view shows the configuration of interface VPC endpoints in the staging area VPC to connect Amazon S3 and Application Migration Service. +The following detailed view shows the configuration of interface VPC endpoints in the staging area VPC to connect Amazon S3 and MGN. @@ -72 +72 @@ The following detailed view shows the configuration of interface VPC endpoints i - * [AWS Application Migration Service](https://docs.aws.amazon.com/mgn/latest/ug/what-is-application-migration-service.html) simplifies, expedites, and reduces the cost of rehosting applications on AWS. + * [AWS Transform MGN](https://docs.aws.amazon.com/mgn/latest/ug/what-is-application-migration-service.html) simplifies, expedites, and reduces the cost of rehosting applications on AWS. @@ -83 +83 @@ Task| Description| Skills required -Configure the interface endpoint for Application Migration Service.| The source data center and staging area VPC connect privately to the Application Migration Service control plane through the interface endpoint that you create in the target staging area VPC. To create the endpoint: +Configure the interface endpoint for MGN.| The source data center and staging area VPC connect privately to the MGN control plane through the interface endpoint that you create in the target staging area VPC. To create the endpoint: @@ -115 +115 @@ Configure the Amazon S3 Gateway endpoint.| During the configuration phase, the r -Configure on-premises DNS to resolve private DNS names for endpoints.| The interface endpoints for Application Migration Service and Amazon EC2 have private DNS names that can be resolved in the VPC. However, you also need to configure on-premises servers to resolve private DNS names for these interface endpoints.There are multiple ways to configure these servers. In this pattern, we tested this functionality by forwarding on-premises DNS queries to the Amazon Route 53 Resolver inbound endpoint in the staging area VPC. For more information, see [Resolving DNS queries between VPCs and your network](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-overview-DSN-queries-to-vpc.html) in the Route 53 documentation.| Migration engineer +Configure on-premises DNS to resolve private DNS names for endpoints.| The interface endpoints for MGN and Amazon EC2 have private DNS names that can be resolved in the VPC. However, you also need to configure on-premises servers to resolve private DNS names for these interface endpoints.There are multiple ways to configure these servers. In this pattern, we tested this functionality by forwarding on-premises DNS queries to the Amazon Route 53 Resolver inbound endpoint in the staging area VPC. For more information, see [Resolving DNS queries between VPCs and your network](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-overview-DSN-queries-to-vpc.html) in the Route 53 documentation.| Migration engineer @@ -122 +122 @@ Install AWS Replication Agent by using AWS PrivateLink.| - 2. Log in to the source servers to be migrated. The AWS Replication Agent installer needs network access to the Application Migration Service and Amazon S3 endpoints. Because your on-premises network isn’t open to Application Migration Service and Amazon S3 public endpoints, you must install the Agent with the help of the interface endpoints you created in the previous steps by using AWS PrivateLink. + 2. Log in to the source servers to be migrated. The AWS Replication Agent installer needs network access to the MGN and Amazon S3 endpoints. Because your on-premises network isn’t open to MGN and Amazon S3 public endpoints, you must install the Agent with the help of the interface endpoints you created in the previous steps by using AWS PrivateLink. @@ -140 +140 @@ For example, if the DNS name of the Amazon S3 interface endpoint is `vpce-009c8b - * If you selected **Enable DNS name** when you created an interface endpoint for Application Migration Service, run the command: + * If you selected **Enable DNS name** when you created an interface endpoint for MGN, run the command: @@ -149 +149 @@ For example, if the DNS name of the Amazon S3 interface endpoint is `vpce-009c8b - * If you didn’t select **Enable DNS name** when you created the interface endpoint for Application Migration Service, run the command: + * If you didn’t select **Enable DNS name** when you created the interface endpoint for MGN, run the command: @@ -159 +159 @@ For example, if the DNS name of the Amazon S3 interface endpoint is `vpce-009c8b -For more information, see [AWS Replication Agent installation instructions](https://docs.aws.amazon.com/mgn/latest/ug/agent-installation.html) in the Application Migration Service documentation. +For more information, see [AWS Replication Agent installation instructions](https://docs.aws.amazon.com/mgn/latest/ug/agent-installation.html) in the MGN documentation. @@ -161 +161 @@ For more information, see [AWS Replication Agent installation instructions](http -After you have established your connection with Application Migration Service and installed the AWS Replication Agent, follow the instructions in the [Application Migration Service documentation](https://docs.aws.amazon.com/mgn/latest/ug/migration-workflow-gs.html) to migrate your source servers to your target VPC and subnet.| Migration engineer +After you have established your connection with MGN and installed the AWS Replication Agent, follow the instructions in the [MGN documentation](https://docs.aws.amazon.com/mgn/latest/ug/migration-workflow-gs.html) to migrate your source servers to your target VPC and subnet.| Migration engineer @@ -165 +165 @@ After you have established your connection with Application Migration Service an -**Application Migration Service documentation** +**MGN documentation** @@ -184 +184 @@ After you have established your connection with Application Migration Service an - * [AWS Application Migration Service – A Technical Introduction](https://www.aws.training/Details/eLearning?id=71732) (AWS Training and Certification walkthrough) + * [AWS Transform MGN – A Technical Introduction](https://www.aws.training/Details/eLearning?id=71732) (AWS Training and Certification walkthrough) @@ -186 +186 @@ After you have established your connection with Application Migration Service an - * [AWS Application Migration Service architecture and network architecture](https://youtu.be/ao8geVzmmRo) (video) + * [AWS Transform MGN architecture and network architecture](https://youtu.be/ao8geVzmmRo) (video)