An energy utility company plans to migrate its legacy billing and operations platform to AWS. The on-premises environment is hosted on Microsoft Hyper-V. Due to strict energy sector compliance regulations, the security team prohibits installing any third-party software agents on the database virtual machines (VMs) containing customer billing data. However, the migration team requires deep network dependency mapping and process-level details for the web and application tier VMs to identify system boundaries and map network connections. Additionally, the company wants to track the overall migration status from a single dashboard using both AWS Application Discovery Service and third-party migration tools. Which combination of discovery mechanisms and tracking setup will meet these requirements while complying with the security policy?
- Deploy the AWS Application Discovery Agentless Collector on the Hyper-V hosts to gather configuration and performance data for the database virtual machines. Install the AWS Application Discovery Agent on the web and application virtual machines to collect network connections and process details. Register both the AWS discovery tools and the third-party migration tools with AWS Migration Hub in a single home Region to track the migration.Answer
- BInstall the AWS Application Discovery Agent on all virtual machines, configuring the agents on the database virtual machines to run in read-only mode to satisfy the security policy. Use AWS Application Migration Service (MGN) to import the server inventory and track the migration status of both AWS and third-party tools from the replication console.
- CDeploy the AWS Application Discovery Agentless Collector on the Hyper-V hosts for all virtual machines, as the collector can perform guest OS process-level analysis and map TCP/UDP network connections without agent installation. Set up Service Control Policies (SCPs) in AWS Organizations to restrict AWS Migration Hub tracking access to compliance administrators.
- DUse AWS DataSync to scan the Hyper-V datastores to identify VM configurations and map network dependencies. Deploy the AWS Application Discovery Agentless Collector to monitor performance, and configure AWS Migration Hub in multiple target Regions to track the migration process for each application tier.