AWS mgn documentation change
Summary
Added FSx for ONTAP storage references, included security group configuration note for iSCSI access, and clarified EBS volume type applicability.
Security assessment
The change adds documentation about configuring security groups to allow iSCSI access (TCP port 3260) for FSx for ONTAP storage, which is a security-related configuration but doesn't address a specific vulnerability. It enhances documentation of security features without fixing an existing security issue.
Diff
diff --git a/mgn/latest/ug/launch-template.md b/mgn/latest/ug/launch-template.md index 7233f1bcb..39736fd06 100644 --- a//mgn/latest/ug/launch-template.md +++ b//mgn/latest/ug/launch-template.md @@ -17 +17 @@ To edit the launch template for your entire account, you need to edit your launc -This opens the account template view. Click **Edit** to update your account-level launch template. +This opens the account template view. Choose **Edit** to update your account-level launch template. @@ -51 +51 @@ In the **General launch settings** section, you can define: - * **Transfer server tags** : Select if you want AWS Transform MGN to transfer user-configured custom tags from your source servers to your test or cutover instance. If selected, server tags are transferred. These tags are attached to all source servers, all launched test and cutover instances, and all of the ephemeral resources that are created on your AWS account during the normal operation of AWS Transform MGN, such as snapshots, Amazon EBS volumes, replication and conversion servers, and security groups. + * **Transfer server tags** : Select if you want AWS Transform MGN to transfer user-configured custom tags from your source servers to your test or cutover instance. If selected, server tags are transferred. These tags are attached to all source servers, all launched test and cutover instances, and all of the ephemeral resources that are created on your AWS account during the normal operation of AWS Transform MGN, such as snapshots, storage volumes (Amazon EBS and FSx for ONTAP), replication and conversion servers, and security groups. @@ -75,0 +76,4 @@ In the **Default EC2 launch template** section, you can define the following opt +###### Note + +If you have selected FSx for ONTAP as the target storage in Replication settings, ensure you select a security group that allows your launched instances to connect to the FSx for ONTAP file system over iSCSI (TCP port 3260). See [Step 1: Configure security groups](./fsx-ontap.html#fsx-ontap-step1-security-groups) in the [FSx for ONTAP configuration guide](./fsx-ontap.html). + @@ -78 +82 @@ In the **Default EC2 launch template** section, you can define the following opt - * **EBS volume type** – Choose an Amazon EBS volume type for the test and cutover machines. The Amazon EBS volume type options are io1, io2, gp3, st1, and sc1. + * **EBS volume type** – When using Amazon EBS as the target storage type, choose an Amazon EBS volume type for the test and cutover machines. The Amazon EBS volume type options are io1, io2, gp3, st1, and sc1. This setting does not apply when using FSx for ONTAP.