NEW - You can now accelerate your migration and modernization with AWS Transform. Read [Getting Started](https://docs.aws.amazon.com/transform/latest/userguide/getting-started.html) in the *AWS Transform User Guide*.

# AWS managed policy: AWSApplicationMigrationNetworkMigrationMultiAccount
<a name="security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationMultiAccount"></a>

You can attach the `AWSApplicationMigrationNetworkMigrationMultiAccount` policy to your IAM identities.

This identity-based policy enables AWS Application Migration Service (MGN) to create, modify, and manage network infrastructure components through CloudFormation. The policy grants permissions necessary for:

1. **Network Resource Management:** Creating and managing VPCs, subnets, route tables, and network ACLs; configuring Transit Gateways and their attachments; managing security groups and their rules; setting up NAT Gateways and Internet Gateways; handling network interfaces and elastic IPs

1. **CloudFormation Operations:** Creating and managing stacks with prefix [Nmd\$1]; describing stack resources and events; updating and deleting stacks

1. **Resource Sharing:** Managing RAM (Resource Access Manager) resource shares; sharing Transit Gateways across accounts within the same organization

1. **Custom Resources:** Creating and managing Lambda functions with prefix [network-migration\$1]; managing IAM roles with prefix [Nmd\$1modifyTransitGateway\$1]; creating and managing CloudWatch log groups

The policy enforces security through resource tagging requirements (CreatedBy: AWSApplicationMigrationService), conditional checks ensuring operations are called via CloudFormation, organization-level controls for cross-account resource sharing, and specific resource-level permissions for critical network components.

This policy grants both programmatic and console access required for AWS Application Migration Service to orchestrate network infrastructure deployment and management through CloudFormation.

 **Permissions details** 

To view the policy permission details see [AWSApplicationMigrationNetworkMigrationMultiAccount](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSApplicationMigrationNetworkMigrationMultiAccount.html) in the AWS Managed Policy Reference Guide.