AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2026-07-10 · Documentation low

File: prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/restrictive.md

Summary

Updated terminology from 'Site-to-Site VPN or Direct Connect' to 'AWS VPN or AWS Direct Connect', changed image reference, clarified that AWS Transform MGN creates resources, and reformatted network connectivity note.

Security assessment

Changes involve terminology updates and formatting improvements without addressing vulnerabilities or security features. The network connectivity clarification doesn't indicate security fixes.

Diff

diff --git a/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/restrictive.md b/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/restrictive.md
index 7ab5bb179..4569de2fd 100644
--- a//prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/restrictive.md
+++ b//prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/restrictive.md
@@ -5 +5 @@
-[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Migrating on-premises servers to AWS over private networks by using AWS Transform MGN](welcome.html)
+[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Migrating on-premises servers to AWS over private networks by using AWS Transform MGN](introduction.html)
@@ -9 +9 @@
-The following diagram displays the architecture of the most restrictive scenario, where all traffic goes over the private channel (Site-to-Site VPN or Direct Connect) between the source environment and AWS.
+The following diagram displays the architecture of the most restrictive scenario, where all traffic goes over the private channel (AWS VPN or AWS Direct Connect) between the source environment and AWS.
@@ -11 +11 @@ The following diagram displays the architecture of the most restrictive scenario
-![MGN communications over private channel](/images/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/images/restrictive.png)
+![](/images/prescriptive-guidance/latest/rehost-servers-over-private-networks-mgn/images/guide-img/db816b63-918e-424c-861e-0630fc54fedf/images/e7418ef1-d0ff-4c73-aa2c-00c6bb1a8dad.png)
@@ -17 +17 @@ The main components of this architecture are:
-  * _Staging environment_ in AWS with private virtual private cloud (VPC) and subnet (in the middle). This is the environment that MGN will use to create replication-related resources. These resources might include replication servers, conversion servers, and related Amazon Elastic Block Store (Amazon EBS) volumes and their Amazon Simple Storage Service (Amazon S3) snapshots.
+  * _Staging environment_ in AWS with private virtual private cloud (VPC) and subnet (in the middle). This is the environment that AWS Transform MGN will use to create replication-related resources. These resources might include replication servers, conversion servers, and related Amazon Elastic Block Store (Amazon EBS) volumes and their Amazon Simple Storage Service (Amazon S3) snapshots.
@@ -27 +27,5 @@ The main components of this architecture are:
-  * _Target environment_ in AWS (on the right). This can be a completely isolated VPC or a subnet in the staging environment. (Note: There's no network connectivity requirement from the staging environment subnet to the target subnets.)
+  *  _Target environment_ in AWS (on the right). This can be a completely isolated VPC or a subnet in the staging environment.
+
+###### Note
+
+There's no network connectivity requirement from the staging environment subnet to the target subnets.