Skip to content

What is the best way to preserve external touch points (VPNs, IP allow lists, etc.) when migrating? #224

Answered by antmordel
marijakstrazdas asked this question in Help
Discussion options

You must be logged in to vote

Hi! Thanks for the question. Although the Ref Arch is a completely separate new deployment (i.e. separate from the infrastructure you may already be running), there are a few things we can configure:

  • We can configure the mgmt VPC CIDR for all accounts.
  • We can configure the app VPC CIDR for app accounts (i.e. dev, stage and prod)

Note that we could specify IPAllowList in our Ref Arch form that will control who has access to private resources via the Bastion host.

I hope these tips could help you in the migration phase. Please do not hesitate to reach out in case you need further assistance.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by rhoboat
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment