View a markdown version of this page

Document history for the AWS Transform User Guide - AWS Transform

Document history for the AWS Transform User Guide

The following table describes the document history for the AWS Transform User Guide.

ChangeDescriptionDate

Updated cross-region inference destinations for Asia Pacific (Mumbai) and Asia Pacific (Seoul)

Updated the cross-region inference table to show that AWS Transform Chat routes inference requests originating in the Asia Pacific (Mumbai) (ap-south-1) and Asia Pacific (Seoul) (ap-northeast-2) Regions to all commercial AWS Regions. For more information, see Cross-region processing.

October 27, 2026

Added discovery tool troubleshooting and update rollback steps

Added steps to increase the discovery tool VM memory and raise the service memory limit to the Disk and memory sizing page. Added troubleshooting for export memory errors and for the discovery tool VM running out of memory. Added troubleshooting for the Message stream modified and Cannot find KDC for realm Kerberos errors, and steps to roll back a manual in-place update. For more information, see Troubleshooting and Rolling back a manual update.

October 26, 2026

AWS Transform availability in AWS GovCloud (US-West)

Added AWS GovCloud (US-West) to the list of supported Regions as a migration-only Region, available when you use AWS Transform in the AWS GovCloud (US) partition. For more information, see Supported Regions.

October 18, 2026

Migration capabilities available in Asia Pacific (Singapore)

Added the Asia Pacific (Singapore) Region (ap-southeast-1), which supports AWS Transform migration capabilities, to the supported Regions and cross-region inference tables. For more information, see Supported Regions and Cross-region processing.

October 16, 2026

Updated discovery tool documentation for this release

Added SQL Server direct database collection, self-update, and VM skip list documentation. SQL Server database credentials now enable collection of database count, Always On availability group, cluster role, and read-only replica information. Self-update lets you update the discovery tool in place without redeploying the appliance. The VM skip list lets you exclude specific virtual machines from VMware and Hyper-V inventory. For more information, see Set up the discovery tool and Data collection.

October 15, 2026

Added landing zone IaC-only flow documentation

Added a new Generate landing zone IaC without deployment page describing how to use the AWS Transform landing zone capability for organization analysis, recommendations, and Infrastructure as Code generation without direct deployment. The page covers when IaC-only mode applies (Delegated Administrator connector or Management Account with IaC-only preference), the workflow, required permissions, limitations, supported IaC formats (AWS CDK, Terraform, and Landing Zone Accelerator), and common use cases.

October 15, 2026

Added .NET cloud-native code conversion feature

Added the Convert cloud-native code to AWS services page to the .NET section. Also removed the preview designation for VB.NET, WinForms, WPF, and Xamarin projects which are now supported project types.

October 15, 2026

Added PowerShell Transcription logging note to the discovery tool setup guide

Added a note to the Windows prerequisites and WinRM setup sections describing how Windows PowerShell Transcription logging can cause rapid disk accumulation on target servers when agentless collection is enabled, and documenting the recommended GPO service account exemption as the mitigation. For more information, see Set up WinRM and WMI.

September 25, 2026

Cross-region inference for AWS Transform Chat in Asia Pacific (Mumbai) and Asia Pacific (Seoul)

Added a notice indicating that, beginning October 7, 2026, AWS Transform Chat processes inference requests originating in the Asia Pacific (Mumbai) (ap-south-1) and Asia Pacific (Seoul) (ap-northeast-2) Regions across all commercial AWS Regions. Also updated the destination Regions in the cross-region inference table. For more information, see Cross-region processing.

September 16, 2026

Added Kerberos trace-logging aliases to the discovery tool release notes

Added a release note for release 1.0.2325 describing the enablekrb5trace and disablekrb5trace aliases. For more information, see Release notes.

September 16, 2026

.NET ATX CLI and unit test generation

Updated the .NET section with a description of the ATX CLI experience. Added a unit test page describing unit test porting and automatic unit test generation features.

September 10, 2026

AWS GovCloud (US) Regions added as migration target Regions

Added AWS GovCloud (US-East) and AWS GovCloud (US-West) to the list of supported migration target Regions for VMware and other server migrations. These target Regions are available only when you use AWS Transform in the AWS GovCloud (US) partition. For more information, see Supported target Regions.

September 8, 2026

Run migrations with the AWS Transform MCP server

Added a topic describing how to plan and run AWS Transform migrations from an MCP-compatible AI assistant, such as Kiro, Claude Code, Cursor, or Cline, by using the AWS Transform Model Context Protocol (MCP) server. The topic covers setup, authentication, the migration workflow, best practices, and example prompts. For more information, see Run migrations with the AWS Transform MCP server.

September 4, 2026

Updated discovery tool documentation for release 1.0.2325

The discovery tool guide now covers disk monitoring and storage management. It also covers using Kerberos with IP addresses. The guide documents the new unmapped_storage_devices.csv export file. It also lists the renamed disk throughput columns and the new 95th percentile columns. For more information, see Managing discovery tool storage.

September 3, 2026

Updated .NET agent web application experience

Restructured the .NET agent documentation to reflect an updated web application experience, connecting to repository by Personal Access Token, and transformation mode, checkpoints, and beaming features. Added guidance for choosing between the web application and IDE experiences.

September 3, 2026

Updated AWS managed policies for CloudFormation stack tagging

AWS Transform updated two existing AWS managed policies, AWSTransformApplicationDeploymentPolicy and AWSTransformApplicationECSDeploymentPolicy, to add permissions for adding and removing CloudFormation stack tags during stack create and update operations. For more information, see AWS Transform updates for AWS managed policies.

September 3, 2026

New AWS managed policies

AWS Transform added three new AWS managed policies: AWSTransformLandingZoneAgentPolicy, AWSTransformNetworkMigrationAgentPolicy, and AWSTransformServerMigrationAgentPolicy. These policies grant the permissions needed to set up AWS landing zones, deploy network infrastructure for network migration, and perform server migration operations. For more information, see AWS Transform updates for AWS managed policies.

September 3, 2026

Network migration adds security group modernization

While reviewing your target network, you can now create, configure, and delete security groups and rules. You can also associate a rule with a CIDR range or source VM, and enable security group referencing for a specific rule. See Review and optimize your network.

August 31, 2026

Migrations adds Amazon FSx for NetApp ONTAP support

AWS Transform for migrations now supports Amazon FSx for NetApp ONTAP as a generally available block storage target, alongside Amazon Elastic Block Store (Amazon EBS). This capability is available in all AWS Transform supported target Regions and where Amazon FSx for NetApp ONTAP is supported. See Configuring FSx for ONTAP as a target storage type.

August 30, 2026

Network migration adds security posture migration to existing VPCs

You can now apply your source security posture to VPCs you have already provisioned in AWS, instead of creating new VPCs. See Apply security posture to existing VPCs.

August 24, 2026

Guided network recommendations add application alignment

Guided network recommendations can now identify VPCs that host applications from multiple environments and suggest splitting them along subnet boundaries to isolate environments such as development and production. See Guided network recommendations.

August 17, 2026

Network migration adds stale security group rule removal

Guided network recommendations can now identify unused inbound firewall rules migrated from your on-premises environment and suggest removing them. See Guided network recommendations.

August 16, 2026

Connectors topic moved to Getting started

The Connectors topic has moved from the top-level navigation to the Getting started section. See Connectors.

August 8, 2026

Continuous modernization adds AWS Transform-managed remote execution

Continuous modernization can now run analyses on AWS Transform-managed infrastructure with nothing to provision in your account, using atx ct remote analysis --mode aws-managed. You can also schedule recurring analyses that run on AWS Transform-managed infrastructure without Amazon EventBridge. See Compute options.

August 7, 2026

Continuous modernization adds remote execution, scheduling, and tagging

Continuous modernization now includes atx ct remote commands to provision and run analyses and remediations on Amazon EC2 or AWS Batch, atx ct schedule commands to run recurring analyses with Amazon EventBridge Scheduler, and resource tagging for attribute-based access control (ABAC). New AWS managed policies support least-privilege remote and security agent execution. The atx ct server command is deprecated. See Working with continuous modernization.

July 28, 2026

Continuous modernization portfolio analysis and remediation

Added new chapter documenting the AWS Transform continuous modernization feature (atx ct subcommands) for automated code analysis and remediation. See continuous modernization.

June 3, 2026

Brownfield network: existing VPCs visibility

Added existing VPC detection during network migration review. AWS Transform automatically detects VPCs already deployed in your target account and flags CIDR conflicts with your mapped VPCs. See Existing VPCs in your target account.

May 18, 2026

Added skills format, client-side skills, and subagent logs for AWS Transform custom

Transformation definitions now use the skills format (SKILL.md with YAML frontmatter and optional references/ folder). Added client-side skills for extending the agent with additional capabilities, and subagent logs for improved debugging. Requires CLI version 2.0 or later. See Transformation Definitions and Client-Side Skills.

May 11, 2026

Added source code containerization

AWS Transform can now containerize your applications using generative AI. Provide your source code from Git repositories or zip uploads, and AWS Transform analyzes it, generates Docker artifacts, publishes container images to Amazon ECR, generates infrastructure as code, and deploys to Amazon Elastic Container Service or Amazon Elastic Kubernetes Service. See Source code containerization.

May 7, 2026

Added network optimization operations and guided recommendations

Added Step 5: Review and optimize network, with VPC and subnet operations (delete, exclude, merge, split, resize, rename, change IP address) and guided recommendations for naming standardization, scope review, capacity right-sizing, security review, and VPC consolidation. See Review and optimize network.

April 27, 2026

AWS Transform custom available in 6 new regions

Added support for ca-central-1, eu-west-2, ap-northeast-1, ap-northeast-2, ap-southeast-2, and ap-south-1 in AWS Transform custom.

April 21, 2026

Updated connector permissions documentation

Added detailed permissions breakdown for the target AWS account connector, covering S3, MGN, Migration Hub permissions, workload migration, and landing zone infrastructure provisioning. See Connect target AWS accounts.

April 19, 2026

Updated VMware migration job types

Added Discovery and migration planning, Landing zone, and Landing zone, network, and server migration job types. Renamed Network migration only to Network migration and Migration planning to Build migration plan. See VMware migration job types.

April 19, 2026

Restructured Connect target AWS accounts

Restructured the connector setup into three steps: Migration type selection, MAP agreement, and Connector configuration, including supported target regions, account roles, delegated administrator guidance, and IAM roles. See Connect target AWS accounts.

April 19, 2026

Added additional server-migration-only target regions

Documented 14 additional commercial regions available for server migration jobs without network migration, with allow-list requirement until Q3 2026. See Supported target regions.

April 19, 2026

Added Migrate servers chapter

Added new Migrate servers chapter covering the full rehost workflow including account structure, IAM roles, delegated administrator setup, replication agent deployment, testing, and cutover.

April 19, 2026

Added Build landing zone chapter

Added new Build landing zone chapter with connector permissions details for landing zone provisioning.

April 19, 2026

Security groups mapping and referencing

Added security groups mapping strategies (MAP, MAP_DHCP, SKIP) and security group referencing documentation to Migrate network.

April 13, 2026

Auto-conversion for unsupported network file types

Added support for automatic conversion of unsupported network configuration file types in Migrate network.

April 6, 2026

Added KMS key policy for database migration

Added Encryption for database migration section.

March 26, 2026

Documented new AWS managed policy

Added DBModProvisioningAndMigration section.

March 24, 2026

Documented new AWS managed policy

Added DBModDiscoveryAndAssessment section.

March 24, 2026

Network diagram generation

Added optional network diagram generation (Mermaid and PNG formats) to Migrate network.

March 18, 2026

Firewall and SDN configuration file support

Added support for Palo Alto Networks, Fortinet FortiGate, and Cisco ACI configuration files for network migration in Migrate network.

February 11, 2026

Custom tagging for network resources

Added job-level and VPC-level custom tagging support for network migration in Migrate network.

January 28, 2026

Added support documentation

Added AWS support for section.

December 23, 2025

Documented new AWS managed policies

Added AWSTransformCustomFullAccess, AWSTransformCustomExecuteTransformations, and AWSTransformCustomManageTransformations sections.

December 7, 2025

VMware migration

Updated the VMware migration section.

December 1, 2025

Updated AWS managed policy

Updated the AWSServiceRoleForAWSTransform documentation to reflect added permissions.

December 1, 2025

Supported regions

Updated the Supported regions topic.

December 1, 2025

Mainframe modernization

Updated the Mainframe modernization section.

December 1, 2025

Getting Startedy

Updated the Getting Started topic.

December 1, 2025

Full-stack Windows modernization

Added the Full-stack Windows modernization topic, which includes the updated .NETsection and the new SQL Server modernization section.

December 1, 2025

Discovery tool

Added the Discovery tool section.

December 1, 2025

Updated AWS managed policy

Updated the AWSTransformApplicationECSDeploymentPolicy with expanded IAM role inspection permissions, ECS service-linked role creation, and KMS permissions for ECR encryption support.

November 22, 2025

Updated AWS managed policy

Updated the AWSTransformApplicationDeploymentPolicy with additional EC2 networking, IAM role inspection, S3 bucket management, and KMS encryption permissions.

November 22, 2025

Discovery collector

Added the AWS Transform discovery tool> documentation.

October 31, 2025

VMware migration architecture diagram added

Added a VMware migration architecture diagram in Migrate network.

October 23, 2025

VMware migration results update

Updated migration results information in Migrate network.

October 12, 2025

VMware migration results update

Updated migration results information in Migrate network.

October 12, 2025

S3 connector documentation

Added S3 connector documentation for .NET web app.

October 8, 2025

New user connectors topic

Added user connectors topic.

September 21, 2025

Updated AWS managed policy

Updated the AWSServiceRoleForAWSTransform documentation.

September 17, 2025

Storage assessment support

Added NetApp Data Infrastructure Insights (DII) file support for storage assessments.

September 2, 2025

Target regions update

Added three supported target regions.

August 31, 2025

Managed policy update

Added IAM Identity Center read-only permisions to be used by AWSServiceRoleForAWSTransform.

August 29, 2025

Documented new AWS managed policy

Added AWSTransformApplicationDeploymentPolicy section.

August 28, 2025

interface endpoints

Added interface endpoints topic.

July 9, 2025

Initial release

Initial release of the AWS Transform User Guide.

May 15, 2025