Migrating IAM resources
The IBM® Cloud Logs migration tool is a command line tool that you can use to migrate your IBM Log Analysis or IBM Cloud Activity Tracker instance configuration to IBM Cloud Logs.
You can run the following command to find out what IAM resources you will need to migrate and get Terraform for IAM resources that the tool can provide to help you migrate IAM resources:
ibmcloud logging migrate generate-terraform --scope iam
Files generated
By default the migration tools writes temporary files to the migration-tool/ directory. You can specify a different directory if required.
Temporary files
The directory migration-tool/tmp/accountID/functional-logs/iam includes detailed logs that are related to the migration of IAM resources.
The file migration-tool/tmp/accountID/functional-logs/iam/iam_functional_exception_report includes the list of resources and migration status.
The directory migration-tool/tmp/accountID/ includes the following information:
| File name | Information |
|---|---|
iam_exception_report.json |
Information on resources that need attention before migration |
iam_groups_summary.json |
Information on access groups that need to be migrated |
iam_s2s-cos-authorizations-summary.json |
Information on service to service authorizations that need to be migrated |
iam_s2s-kms-authorizations-summary.json |
Information on KMS-COS authorizations that you need for migrating resources |
iam_service_ids_summary.json |
Information on service IDs that need to be migrated |
iam_trusted_profiles_summary.json |
Information on trusted profiles that need to be migrated |
iam_users_summary |
Information on users that need to be migrated |
Terraform files
The directory /migration-tool/cl/accountID/manual-tf-files/iam-tf-files includes the following Terraform files:
| File name | Information |
|---|---|
iam_groups.tf |
Terraform to create policies for IBM Cloud Logs in access groups |
iam_profiles.tf |
Terraform to create policies for IBM Cloud Logs in trusted profiles |
iam_service_ids.tf |
Terraform to create policies for IBM Cloud Logs in service IDs |
iam_users/tf |
Terraform to create policies for IBM Cloud Logs for users |