AWS Migration Architect：基于Claude Code的账户迁移自动化工具包

AWS Migration Architect is a Claude Code-specific plugin toolkit designed to automate end-to-end AWS account migration. It addresses manual migration pain points via 9 professional skills, 9 sub-agents, and 4 workflow orchestrators, covering resource inventory, dependency analysis, Terraform generation, migration planning, cutover execution, and post-migration audit. The toolkit supports both manual-driven (step-by-step human review) and orchestration-driven (automated planning + human-approved execution) modes, ensuring risk control and auditability.

AWS account migration is common for org restructuring, account merging, or environment isolation. Manual migration faces challenges like complex resource dependencies, numerous configuration items, limited cutover windows, and difficulty verifying rollback plans. AWS Migration Architect was built to turn these chaotic processes into predictable, verifiable, and rollback-capable automated workflows.

The toolkit's 9 skills are divided into three phases:

1. Inventory & Planning: Resource inventory, dependency analysis (generates dependency graphs and risk scores), Terraform HCL generation (parameterized for portability), migration planning (cost baseline assessment + readiness score), data migration planning (RPO/RTO setting, transfer tool selection).
2. Cutover Prep: Control plane cutover (7-phase checklist for network/storage/db/compute setup without data movement) and data plane cutover (5-phase checklist for data transfer/sync/validation).
3. Execution & Audit: Cutover executor (step-by-step execution with human approval, rollback options on failure) and post-migration auditor (resource consistency verification).

Operation modes:

• Manual-driven: Call skills one by one, human review outputs before next step (read-only except executor).
• Orchestration-driven: Use /aws-migration-architect:migrate for automated planning, then /execute for approved cutover, and /audit for verification.

Plugin Installation: In Claude Code, run /plugin marketplace add /path/to/aws-migration-architect then /plugin install aws-migration-architect (installs 9 skills, 9 sub-agents, 4 slash commands, 3 MCP servers).

Local Env Prep: Install AWS CLI ≥2.15, Terraform ≥1.6, uv (via brew/pipx/curl).

AWS Credentials: Configure SSO profiles for source (migration-source with MigrationReadOnly) and target (migration-target) accounts.

IAM Policies: Source account uses source-read-only.json; target account uses target-validate-only.json (phase1), target-cutover-control-plane.json (phase2), and target-cutover-data-plane.json (phase2+).

1. Structured Process: Turns chaotic migration into a predictable pipeline with clear inputs/outputs and验收 standards.
2. Risk Control: Phased cutover (control/data plane separation), step-by-step human approval, irreversible step marking.
3. Auditable & Rollback Capable: Complete execution logs, resource diff checks, and verification checkpoints.
4. Claude Code Integration: Leverages AI for complex dependency analysis and planning while retaining human final decision-making.

Applicable Scenarios:

• Enterprise AWS account merge/split.
• Environment isolation (e.g., moving production to an independent account).
• Account ownership change due to org restructuring.

Limitations:

• Supports common AWS services only (special/new services need extra config).
• Large-scale data migration (TB/PB level) requires additional optimization/testing.
• Requires basic Terraform and AWS knowledge.

AWS Migration Architect represents a new AI-assisted cloud ops paradigm—combining AI's reasoning ability with human decision-making. It automates tedious tasks while keeping humans in control of critical nodes. For teams facing AWS account migration challenges, this toolkit provides a well-designed reference implementation worth studying and adopting.