Step 1: Choose your deployment option
There are three options for deployment of the initial stack and choosing the correct one depends on the security policies for the target environment.
These options are:
-
Public (default): All Cloud Migration Factory on AWS endpoints are publicly addressable with user authentication. This option deploys the following entry points: CloudFront, Public API Gateway Endpoints, and Cognito.
-
Public with AWS WAF: Access to Cloud Migration Factory endpoints is restricted to customizable CIDR ranges. This option deploys the following entry points: CloudFront, Public API Gateway Endpoints, Cognito, and AWS WAF restricting access to specific CIDR ranges.
-
Private: All Cloud Migration Factory endpoints are accessible only from your VPC networks and the Cloud Migration Factory on AWS web console must be hosted on a private web server deployed separately. This option deploys the following entry points: Private API Gateway Endpoints (accessible within a VPC only) and Cognito.