A financial services firm is planning to migrate its core transactional systems to AWS. The on-premises environment consists of 150 physical bare-metal servers running supported versions of Red Hat Enterprise Linux and Windows Server, and 300 virtual machines hosted on Nutanix AHV. The compliance team requires process-level network dependency mapping for all servers to group them into applications before migration. The network security policy prohibits direct outbound internet access from individual database and application servers, but allows traffic to pass through a centralized administrative proxy server. Which strategy should a Solutions Architect recommend to discover the environment and track the migration in AWS Migration Hub?
- Install the AWS Application Discovery Agent on all physical and virtual servers. Configure the agents to route outbound discovery metadata through the centralized administrative proxy server. Use the collected dependency data in AWS Migration Hub to group the servers into applications.Cevap
- BDeploy the AWS Application Discovery Agentless Collector in the Nutanix AHV environment and configure it to query the hypervisor APIs. For the physical servers, configure a central log collector to forward system syslog and event logs to AWS Migration Hub for dependency analysis.
- CInstall the AWS Application Discovery Agent on all physical and virtual servers. Configure the local server firewalls to bypass the security policy and allow outbound HTTPS traffic directly over TCP port 443 to the public AWS Application Discovery Service endpoints.
- DDeploy AWS Database Migration Service (DMS) agents on the database servers to capture schema and dependency data. For the application servers, deploy the AWS Application Discovery Agentless Collector on a dedicated management server configured to scan the subnet ranges.
Cevap
Install the AWS Application Discovery Agent on all physical and virtual servers, configure them to route discovery metadata through the centralized administrative proxy server, and use AWS Migration Hub to group the servers into applications.
The correct strategy is to deploy the AWS Application Discovery Agent on all physical and virtual servers. The agent-based approach is necessary because the environment includes physical bare-metal servers and Nutanix AHV VMs, which are not supported by the VMware-only Agentless Collector. Furthermore, the agent is required to capture the process-level network dependency mapping demanded by the compliance team. To respect the network security policy that bans direct internet access, the agents can be configured to forward metadata through the central administrative proxy server.
Adım Adım Çözüm
Anahtar Kavram
AWS Application Discovery Service deployment choices and networking configurations