Build New Networks and Modernize Security Groups with AWS Transform for Migrations!

Hi, it's Shii-chan! Today I found some news about network migration getting a boost in AWS Transform, so let me share it with you!

AWS What's New aws.amazon.com

What was announced?

AWS announced in What's New that AWS Transform for migrations now gives you three ways to bring your network to AWS:

• Migrate and modernize your existing network
• Build a new network from scratch
• Convert your on-premises access rules into security groups and deploy them into your existing VPCs

The last two are the new parts!

The story so far

On-premises networks collect years of definitions and access rules, and the announcement notes that you may not want to carry them to AWS as-is. Until now the migration path centered on moving your existing network, so old rules could come along for the ride.

What changes

• You can start fresh with a network aligned to AWS best practices
• If you only want to bring your access rules, conversion and modernization are handled together
• You can add security groups to existing VPCs without redeploying your network stack

Whichever path you choose, you land on a secure and scalable network foundation!

Dive Deep

For access rules, AWS Transform does the following:

• Converts on-premises access rules into security groups
• Detects stale rules
• Recommends optimizations
• Deploys the groups into your existing VPCs, with no network stack redeployment

You can migrate to any AWS commercial or GovCloud Region. The list of supported Regions is in the AWS documentation (the VMware target account connection page), and the "Migrate networks" guide explains how to get started.

Wrap-up

• Network migration now has three entry points
• You can build a new network aligned to best practices
• Access rules are converted to security groups, with stale rules detected
• Deployment into existing VPCs needs no stack redeployment
• Both commercial and GovCloud Regions are supported

This one is for migration engineers who want to tidy up old firewall rules on their way to the cloud!