This topic describes the operations that you must perform before you migrate data from a Network Attached Storage (NAS) file system to an Object Storage Service (OSS) bucket.

Additional considerations

If the Apsara File Storage NAS file system and the OSS bucket that you use in a migration job belong to different Alibaba Cloud accounts, we recommend that you log on to the Data Transport console with the account to which the NAS file system belongs.

Mount the NAS file system

  • Mount an Apsara File Storage NAS file system
    • You must mount your Apsara File Storage NAS file system on an Elastic Compute Service (ECS) instance. For more information, see Create a mount target.
    • If you configure a permission group for the Apsara File Storage NAS file system, you must add all IP addresses in the virtual private cloud (VPC) in which the ECS instance is deployed to the authorized address list. For more information, see Manage a permission group.
  • Mount a NAS file system that is not deployed on Alibaba Cloud
    • You must connect your NAS server to an Alibaba Cloud VPC.
      • To allow access to your NAS server over an Alibaba Cloud VPC, you can connect the NAS server to the VPC by using an Express Connect circuit. For information about how to deploy an Express Connect circuit, contact Alibaba Cloud Technical Support.
      • You can also connect your NAS server to the VPC over a VPN network.
    • If access to the NAS server is restricted, you must configure the access policy of the NAS server to allow access from all IP addresses in the VPC to which the NAS server is connected.

Create a destination OSS bucket

Create a destination bucket to store the migrated data. For more information, see Create buckets.

Create a Resource Access Management (RAM) user and grant required permissions to the RAM user.

  1. Log on to the RAM console.
  2. In the left-side navigation pane, choose Identities > Users.
  3. On the Users page, click Create User.
  4. On the Create User page, specify Logon Name and Display Name in the User Account Information section.
  5. In the Access Mode section, select Console Access and OpenAPI Access. Then, save the generated logon name, password, AccessKey ID, and AccessKey secret.
    • Console Access: If you select this option, you must configure the console password, password reset settings, and multi-factor authentication settings.
    • OpenAPI Access: If you select this option, an AccessKey pair is automatically created for the RAM user. The RAM user can call API operations or use other development tools to access Alibaba Cloud resources.
    Note If you need to migrate data across accounts, you must save the logon name, password, AccessKey ID, and AccessKey secret that are generated for each RAM user by the corresponding Alibaba Cloud account.
  6. After the RAM user is created, return to the Users page. Find the RAM user and click Add Permissions in the Actions column. In the panel that appears, select the AliyunOSSFullAccess and AliyunMGWFullAccess policies and click OK. This way, the RAM user is granted the permissions to read and write files from OSS and perform online data migrations.
  7. In the left-side navigation pane, click Overview.
  8. On the page that appears, navigate to the Account Management section and click the link under RAM user logon. On the page that appears, enter the logon name and password of the RAM user to log on to the Alibaba Cloud Management Console.