A company is migrating its on-premises virtual machines to AWS using AWS Application Migration Service (MGN). A solutions architect needs to configure network access to ensure the replication agents installed on the source servers can communicate with the AWS migration infrastructure. Which of the following network configuration steps are required to establish this connectivity? (Select TWO.)
- Allow outbound traffic from the on-premises source servers to the AWS Application Migration Service API endpoints over TCP port 443.Answer
- Allow inbound traffic to the replication servers in the AWS staging area over TCP port 1500.Answer
- CConfigure staging area security groups to allow inbound replication traffic only over TCP port 443, as block-level data replication does not utilize TCP port 1500.
- DConfigure a Direct Connect gateway to route transitive replication traffic directly between multiple target VPCs.
- EDeploy a single NAT Gateway in a single Availability Zone to route all outbound control plane traffic for replication servers distributed across multiple Availability Zones.
Answer
Allow outbound traffic from the on-premises source servers to the AWS Application Migration Service API endpoints over TCP port 443, and allow inbound traffic to the replication servers in the AWS staging area over TCP port 1500.
For successful migration using AWS MGN, on-premises source servers must have outbound access over TCP port 443 to communicate with the service API endpoints, and the security groups of the replication servers in the AWS staging area must allow inbound traffic on TCP port 1500 for data replication.
Step-by-Step Solution
Key Concept
AWS MGN network port requirements for control plane and replication data transit.