Hi, i’m going through some security/permission related audit. i’ve questions related to

<https://github.com/Netflix/metaflow-tools/blob/master/aws/cloudformation/metaflow-cfn-template.yml#L462>

How does the migration service work in terms of AWS resources is involved ? I’ve read through the documentation at https://outerbounds.com/docs/migration I’m trying to understand whether a new vpc-endpoint or network interface is created and when does it gets deleted, in the context of migration process …

@adventurous-gigabyte-81428 The migration service is only responsible for migrating the schema of DB powering the metadata service.

for these permissions assigned to the LambdaECSExecuteRole, does the following still being used ? https://github.com/outerbounds/metaflow-tools/blob/master/aws/cloudformation/metaflow-cfn-template.yml#L466

"ec2:CreateNetworkInterface",
                                                        "ec2:DescribeNetworkInterfaces",
                                                        "ec2:DeleteNetworkInterface"

Creation of network interfaces

Those are used to create the lambda function that triggers the metadata service endpoint. You can also invoke it manually with no need to set up / use the lambda function.

Ok thanks for clarifying