AWS prescriptive-guidance documentation change
Summary
Updated documentation links, terminology (e.g., 'SSM Session Manager' to 'AWS Systems Manager Session Manager'), and automation references. Added explicit script links for Cloud Migration Factory and modified network requirement descriptions.
Security assessment
Changes focus on documentation accuracy, terminology alignment, and automation process improvements. While some network security controls (VPC endpoints, IAM profiles) are mentioned, there's no evidence of addressing a specific vulnerability or new security feature introduction.
Diff
diff --git a/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/deployment.md b/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/deployment.md index a5125d9b4..f2f4f7170 100644 --- a//prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/deployment.md +++ b//prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/deployment.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Migrating on-premises servers to AWS over private networks by using AWS Transform MGN](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Migrating on-premises servers to AWS over private networks by using AWS Transform MGN](introduction.html) @@ -7 +7 @@ -Manual deploymentAutomating Agent deployments +Manual deploymentAutomate agent deployments with Cloud Migration Factory @@ -13 +13 @@ Many users prefer to thoroughly test all communication channels and migration st - * A [CloudFormation template](https://github.com/aws-samples/amazon-mgn-private-endpoint/blob/main/CloudFormation-for-MGN-private-deployments/MGN_Private_EP_v2_ticket.yaml) that prepares all required resources on AWS. The template builds a proof of concept (PoC) environment that emulates the components of the data center environment and sets up the AWS infrastructure. It includes isolated source and target VPCs, subnets, and VPC endpoints. + * An [AWS CloudFormation template](https://github.com/aws-samples/amazon-mgn-private-endpoint/blob/main/CloudFormation-for-MGN-private-deployments/MGN_Private_EP_v2_ticket.yaml) that prepares all required resources on AWS. The template builds a proof of concept (PoC) environment that emulates the components of the data center environment and sets up the AWS infrastructure. It includes isolated source and target VPCs, subnets, and VPC endpoints. @@ -15 +15 @@ Many users prefer to thoroughly test all communication channels and migration st - * A dedicated workshop ([Migrate the Well-Architected Way](https://catalog.workshops.aws/well-architected-migration/)) with detailed, step-by-step instructions to create your test environment (see the step [Create VPC Endpoints](https://catalog.workshops.aws/well-architected-migration/en-US/2-migration/1-initial-credentials-setup/3-vpc-endpoints)). + * A dedicated workshop ([Migrate the Well-Architected Way](https://catalog.workshops.aws/well-architected-migration/)) with detailed, step-by-step instructions to create your test environment (see the step [Create VPC endpoints](https://catalog.workshops.aws/well-architected-migration/en-US/2-migration/1-initial-credentials-setup/3-vpc-endpoints)). @@ -24 +24 @@ Alternatively, you can deploy your PoC environment by following the steps in the -The following list outlines the major steps for manual deployments in your environment. For more information, see the AWS Prescriptive Guidance pattern [Connect to MGN data and control planes over a private network](https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.html?did=pg_card&trk=pg_card). +The following list outlines the major steps for manual deployments in your environment. For more information, see [Connect to AWS Transform MGN data and control planes over a private network](https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.html?did=pg_card&trk=pg_card). @@ -34 +34 @@ The following list outlines the major steps for manual deployments in your envir - * Amazon S3 (private DNS name not supported). Interface endpoints are supported across Direct Connect, Site-to-Site VPN, and VPC peering. Therefore, this is required for source servers only (and could be located on premises) to connect to the MGN control plane over a private network. + * Amazon S3 (private DNS name not supported). Interface endpoints are supported across Direct Connect, AWS VPN, and VPC peering. Therefore, this is required for source servers only (and could be located on premises) to connect to the MGN control plane over a private network. @@ -38 +38 @@ The following list outlines the major steps for manual deployments in your envir -The **ssm** and **ssmmessages** endpoints are optional and currently created to connect the source server through the SSM Session Manager. +The **ssm** and **ssmmessages** endpoints are optional and currently created to connect the source server through the AWS Systems Manager Session Manager. @@ -53 +53 @@ Source | Destination | Port | Description -**Source data center** | The MGN AWS Region-specific console address | 443 (TCP) | [Communication between the source servers and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Source-Manager-TCP-443) +**Source data center**| The MGN Region-specific console address| 443 (TCP)| [Communication between the source servers and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Source-Manager-TCP-443) @@ -55 +55 @@ Source | Destination | Port | Description -**Staging area subnet** | The MGN AWS Region-specific console address | 443 (TCP) | [Communication between the staging area subnet and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Communication-TCP-443-Staging) +**Staging area subnet**| The MGN Region-specific console address| 443 (TCP)| [Communication between the staging area subnet and MGN over TCP port 443](https://docs.aws.amazon.com/mgn/latest/ug/Network-Requirements.html#Communication-TCP-443-Staging) @@ -59 +59 @@ Source | Destination | Port | Description - 7. Initialize Application Migration Srvice in the staging area AWS Region by updating the staging area subnet details and enabling communication over private IP. + 7. Initialize MGN in the staging area AWS Region by updating the staging area subnet details and enabling communication over private IP. @@ -63 +63 @@ Source | Destination | Port | Description - 9. Create an IAM profile to connect Amazon EC2 via the SSM Session Manager. + 9. Create an IAM profile to connect Amazon EC2 via the Session Manager. @@ -70 +70 @@ Source | Destination | Port | Description -## Automating Agent deployments with Cloud Migration Factory +## Automate agent deployments with Cloud Migration Factory @@ -72 +72 @@ Source | Destination | Port | Description -The [Cloud Migration Factory on AWS](https://aws.amazon.com/solutions/implementations/cloud-migration-factory-on-aws/) automates the deployment of the MGN Agent for the private networks scenario, with additional command line parameters. When you deploy this solution (see options for [automated deployment](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/deployment.html)), you can use these scripts and one of the following options: +The [Cloud Migration Factory on AWS](https://aws.amazon.com/solutions/implementations/cloud-migration-factory-on-aws/) automates the deployment of the MGN Agent for the private networks scenario, with additional command line parameters. When you deploy this solution (see options for [automated deployment](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/deployment.html)), you can use these [scripts](https://github.com/aws-samples/amazon-mgn-private-endpoint/blob/main/CMF-scripts-for-MGN-private-deployments/Archive-endpoint-cmfv3__1_.zip) and one of the following options: @@ -74 +74 @@ The [Cloud Migration Factory on AWS](https://aws.amazon.com/solutions/implementa - * Manually run these [scripts](https://github.com/aws-samples/amazon-mgn-private-endpoint/blob/main/CMF-scripts-for-MGN-private-deployments/Archive-endpoint-cmfv3__1_.zip) from the command line, as described in the [Run automations from command prompt](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/run-automations-from-command-prompt.html) section of the [Cloud Migration Factory Implementation Guide](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/welcome.html) + * Manually run these [scripts](https://github.com/aws-samples/amazon-mgn-private-endpoint/blob/main/CMF-scripts-for-MGN-private-deployments/Archive-endpoint-cmfv3__1_.zip) from the command line, as described in the [Run automations from command prompt](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/run-automations-from-command-prompt.html) section of the [Cloud Migration Factory User Guide](https://docs.aws.amazon.com/solutions/latest/cloud-migration-factory-on-aws/welcome.html)