AWS managed policy: AWSApplicationMigrationAgentInstallationPolicy

This policy allows installing the AWS Replication Agent, which is used with AWS Application Migration Service to migrate source servers to AWS. Attach this policy to your users or roles whose credentials you provide during the installation step of the AWS Replication Agent. The installed AWS Replication Agent will communicate with AWS Application Migration Service using the recommended strong authentication method.

Permissions details

This policy includes the following permissions.

{
        "Version": "2012-10-17",
        "Statement": [
                {
                        "Action": [
                                "mgn:GetAgentInstallationAssetsForMgn",
                                "mgn:SendClientMetricsForMgn",
                                "mgn:SendClientLogsForMgn",
                                "mgn:RegisterAgentForMgn",
                                "mgn:VerifyClientRoleForMgn"
                        ],
                        "Resource": "*",
                        "Effect": "Allow"
                },
                {
                        "Action": "mgn:IssueClientCertificateForMgn",
                        "Resource": "arn:aws:mgn:*:*:source-server/*",
                        "Effect": "Allow"
                },
                {
                        "Condition": {
                                "StringEquals": {
                                        "mgn:CreateAction": "RegisterAgentForMgn"
                                }
                        },
                        "Action": "mgn:TagResource",
                        "Resource": "arn:aws:mgn:*:*:source-server/*",
                        "Effect": "Allow"
                }
        ]
}