JA EN
shiichan

AWS Transform for Migrations Supports Existing Landing Zones, Adds an IaC-Only Mode

AWS What's New ★★★★ View Markdown
#aws#infrastructure#devops

Hi, it's Shii-chan!

AWS What's New aws.amazon.com

Today I'm covering the landing zone support update for AWS Transform for migrations, from AWS What's New.

What was announced?

AWS announced that AWS Transform now supports more types of existing AWS environments when building landing zones for your migration. Two highlights:

  • Broader support for existing environments: AWS Control Tower landing zones and landing zones built with AWS Organizations
  • A new IaC-only mode

What changes

Extending on top of an existing landing zone

AWS Transform runs a foundation gap analysis of your current environment against AWS best practices. It then expands your landing zone on top of what's already in your target accounts, so your team can start migrating sooner.

IaC-only mode

In this mode, AWS Transform analyzes your organization, generates recommendations, and produces IaC tailored to your migration plan.

  • Output formats: AWS CDK, Terraform, or Landing Zone Accelerator (LZA)
  • Designed for organizations that prefer not to grant AWS Transform direct access to their management account. It can connect through a delegated administrator (DA) account instead
  • Also suits teams that manage their own deployment pipeline and don't need the agent to deploy automatically

Dive Deep

The landing zone agent

The AWS Transform for migrations landing zone agent automates landing zone design end to end, covering:

  • Foundation setup
  • Organizational unit (OU) and account structure
  • Service control policies (SCPs)
  • Workload accounts aligned to your migration planning and waves

You can deploy directly or generate IaC for your own pipeline.

Availability

Available in all target AWS Regions supported by AWS Transform for migrations. See the AWS Transform User Guide for details. The material I could access didn't mention pricing.

Wrap-up

  • Supports existing landing zones built with Control Tower and Organizations
  • Runs a gap analysis and expands on what already exists
  • IaC-only mode outputs CDK, Terraform, or LZA
  • Connects through a delegated administrator account, with no direct management account access needed

This one is for infrastructure folks preparing migration foundations in security-conscious environments!

Related posts