AWS prescriptive-guidance documentation change
Summary
Updated 'Application Migration Service' references to 'MGN' in architecture and implementation steps
Security assessment
Changes are purely terminological updates to match service renaming. The security aspects of using VPC endpoints remain unchanged with no new security guidance introduced.
Diff
diff --git a/prescriptive-guidance/latest/rehost-multi-account-architecture-interface-endpoints/solution-1.md b/prescriptive-guidance/latest/rehost-multi-account-architecture-interface-endpoints/solution-1.md index 38428a65b..b2695f8c9 100644 --- a//prescriptive-guidance/latest/rehost-multi-account-architecture-interface-endpoints/solution-1.md +++ b//prescriptive-guidance/latest/rehost-multi-account-architecture-interface-endpoints/solution-1.md @@ -31 +31 @@ In the diagram, the numbers represent the following traffic flow: - 1. The Amazon Elastic Compute Cloud (Amazon EC2) instance or Application Migration Service replication server that needs to connect to Amazon Simple Storage Service (Amazon S3), Application Migration Service, or Amazon EC2 through an interface endpoint that's located in the central networking account VPC first needs to resolve the domain name by querying the VPC+2 resolver. The endpoint private hosted zone is associated with the Application Migration Service staging VPC in the same Region to complete the domain resolution. + 1. The Amazon Elastic Compute Cloud (Amazon EC2) instance or MGN replication server that needs to connect to Amazon Simple Storage Service (Amazon S3), MGN, or Amazon EC2 through an interface endpoint that's located in the central networking account VPC first needs to resolve the domain name by querying the VPC+2 resolver. The endpoint private hosted zone is associated with the MGN staging VPC in the same Region to complete the domain resolution. @@ -43 +43 @@ For each private hosted zone that you associate with a VPC, the resolver creates - 5. The traffic is forwarded to the transit gateway. As specified in the transit gateway route table, the traffic is sent to the spoke Application Migration Service staging VPC. The response is sent by the transit gateway ENI to the destination, that is, to the EC2 instance or Application Migration Service replication server. + 5. The traffic is forwarded to the transit gateway. As specified in the transit gateway route table, the traffic is sent to the spoke MGN staging VPC. The response is sent by the transit gateway ENI to the destination, that is, to the EC2 instance or MGN replication server. @@ -66 +66 @@ Target AWS accounts do not have to be part of the same AWS organization. For mor - 3. Create VPC interface endpoints for Amazon EC2, Application Migration Service, and Amazon S3 in the central network account **without** enabling a private DNS name. + 3. Create VPC interface endpoints for Amazon EC2, MGN, and Amazon S3 in the central network account **without** enabling a private DNS name. @@ -72 +72 @@ When you create a VPC endpoint to an AWS service, you can enable private DNS. Wh - 4. Create a private hosted zone for each endpoint (Application Migration Service, Amazon EC2, Amazon S3). For example, for Application Migration Service in the `us-east-1` Region: + 4. Create a private hosted zone for each endpoint (MGN, Amazon EC2, Amazon S3). For example, for MGN in the `us-east-1` Region: