AWS Managed Services (AMS) Application Developer's Guide AMS Advanced Operations Plan Version September 16, 2020 AWS Managed Services (AMS) Application Developer's Guide AMS Advanced Operations Plan AWS Managed Services (AMS) Application Developer's Guide: AMS Advanced Operations Plan Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. AWS Managed Services (AMS) Application Developer's Guide AMS Advanced Operations Plan Table of Contents Application Onboarding to AMS Introduction ........................................................................................ 1 What is Application Onboarding? ................................................................................................. 1 What we do, what we do not do .................................................................................................. 1 AMS Amazon Machine Images (AMIs) ............................................................................................ 2 Security enhanced AMIs ...................................................................................................... 4 Key terms .................................................................................................................................. 4 What is My Operating Model? ...................................................................................................... 8 AMS service management ................................................................................................................... 9 Account governance ................................................................................................................... 9 Service commencement .............................................................................................................. 9 AMS customer relationship management (CRM) ........................................................................... 10 CRM Process .................................................................................................................... 10 CRM meetings .................................................................................................................. 11 CRM Meeting Arrangements .............................................................................................. 12 CRM monthly reports ........................................................................................................ 12 Updates to shared services: Multi-Account Landing Zone ............................................................... 13 AMS planned event management ............................................................................................... 13 AMS PEM criteria .............................................................................................................. 13 The AMS PEM process ....................................................................................................... 13 Getting help ............................................................................................................................ 14 Service hours ........................................................................................................................... 14 How do I get offboard assistance from AMS Single-Account Landing Zone accounts? ......................... 15 How do I offboard from AMS Multi-Account Landing Zone accounts? .............................................. 15 How do I offboard a Multi-Account Landing Zone environment? ............................................. 16 How do I offboard a Multi-Account Landing Zone application account? .................................... 16 How do I offboard a Multi-Account Landing Zone application account VPC? .............................. 17 Application Development .................................................................................................................. 18 Being Well Architected .............................................................................................................. 18 Application Layer Responsibilities vs Infrastructure Layer Responsibilities ......................................... 19 EC2 Instance Mutability ............................................................................................................. 19 Using AWS Secrets Manager with AMS Resources ......................................................................... 20 Application Deployment .................................................................................................................... 21 Application Deployment Capabilities ........................................................................................... 21 Planning Your Application Deployment ....................................................................................... 23 AMS Workload Ingest (WIGS) ..................................................................................................... 23 Migrating Workloads: Prerequisites for Linux and Windows .................................................... 24 How Migration Changes Your Resource ............................................................................... 26 Migrating Workloads: Standard Process ............................................................................... 27 Migrating Workloads: CloudEndure Landing Zone (SALZ) ....................................................... 28 Tools account, Migrating Workloads: CloudEndure Landing Zone (MALZ) .................................. 30 Migrating workloads: Linux pre-ingestion validation .............................................................. 35 Migrating workloads: Windows pre-ingestion validation ........................................................ 36 Workload Ingest Stack: Creating ......................................................................................... 37 AMS CloudFormation ingest ...................................................................................................... 40 AWS CloudFormation Ingest Guidelines, Best Practices, and Limitations ................................... 41 AWS CloudFormation Ingest: Examples ............................................................................... 54 Create CloudFormation ingest stack .................................................................................... 59 Update AWS CloudFormation ingest stack ........................................................................... 63 Approve a CloudFormation ingest stack changeset ............................................................... 67 Update AWS CloudFormation stacks termination protection ................................................... 69 CodeDeploy requests ................................................................................................................ 72 Create CodeDeploy application .......................................................................................... 72 Create CodeDeploy deployment group ................................................................................ 74 Create CodeDeploy deployment group for EC2 ..................................................................... 77 Version September 16, 2020 iii AWS Managed Services (AMS) Application Developer's Guide AMS Advanced Operations Plan Deploy CodeDeploy application .......................................................................................... 80 Database Migration Service (DMS) .............................................................................................. 83 Database Migration Service (DMS), Planning ........................................................................ 83 DMS Setup, All Tasks ........................................................................................................ 84 Create DMS replication subnet group .................................................................................. 84 2: Create DMS replication instance ..................................................................................... 87 3: DMS Source Endpoint: Create, Create for Mongo DB, Create for S3 ...................................... 90 4: DMS Target Endpoint: Create, Create for S3 ................................................................... 100 5: Create DMS replication task ......................................................................................... 106 Start DMS replication task ............................................................................................... 109 Stop DMS replication task ............................................................................................... 111 Database (DB) Import to AMS SQL RDS ..................................................................................... 114 Setting Up ..................................................................................................................... 114 Importing the Database .................................................................................................. 115 Cleanup ........................................................................................................................