AWS transfer documentation change
Summary
Updated certificate import procedure steps, reordered sections for clarity, and added explicit guidance about certificate chains
Security assessment
Changes focus on procedural clarity and documentation structure rather than addressing security vulnerabilities. While certificates are security-related, this update does not introduce new security features or address specific vulnerabilities.
Diff
diff --git a/transfer/latest/userguide/managing-as2-partners.md b/transfer/latest/userguide/managing-as2-partners.md index 836388eec..2a55ef51a 100644 --- a/transfer/latest/userguide/managing-as2-partners.md +++ b/transfer/latest/userguide/managing-as2-partners.md @@ -53 +53 @@ For details on how to create certificates, see [Step 1: Create certificates for -This procedure explains how to import certificates by using the Transfer Family console. If you want to use the AWS CLI instead, see [Step 3: Import certificates as Transfer Family certificate resources](./as2-example-tutorial.html#as2-import-certs-example). +This procedure explains how to import certificates by using the Transfer Family console. If you want to use the AWS CLI instead, see [Step 2: Import certificates as Transfer Family certificate resources](./as2-example-tutorial.html#as2-import-certs-example). @@ -63 +63 @@ This procedure explains how to import certificates by using the Transfer Family - 4. In the **Certificate configuration** section, for **Certificate description** , enter an easily identifiable name for the certificate. Make sure that you can identify the certificate's purpose by its description. Additionally, choose the role for the certificate. + 4. In the **Certificate description** section, enter an easily identifiable name for the certificate. Make sure that you can identify the certificate's purpose by its description. Additionally, choose the role for the certificate. @@ -65 +65 @@ This procedure explains how to import certificates by using the Transfer Family - 5. In the **Certificate usage** section, choose the purpose for this certificate. It can be used for encryption, signing, or both. + 5. In the **Certificate contents** section, provide a public certificate from a trading partner, or the public and private keys for a local certificate. @@ -67 +67 @@ This procedure explains how to import certificates by using the Transfer Family -**Tip:** If you choose **Encryption and signing** for the usage, Transfer Family creates two identical certificates (each having their own ID): one with a usage value of `ENCRYPTION` and one with a usage value of `SIGNING`. + 6. In the **Certificate usage** section, choose the purpose for this certificate. It can be used for encryption, signing, or both. @@ -69 +69 @@ This procedure explains how to import certificates by using the Transfer Family - 6. In the **Certificate contents** section, provide a public certificate from a trading partner, or the public and private keys for a local certificate. +**Tip:** If you choose **Encryption and signing** for the usage, Transfer Family creates two identical certificates (each having their own ID): one with a usage value of `ENCRYPTION` and one with a usage value of `SIGNING`. @@ -71 +71 @@ This procedure explains how to import certificates by using the Transfer Family -Fill in the **Certificate contents** section with the appropriate details. + 7. Fill in the **Certificate contents** section with the appropriate details. @@ -75 +75,3 @@ Fill in the **Certificate contents** section with the appropriate details. - * Paste the certificate text and its chain into the **Certificate and Certificate chain** field. + * Paste in the contents of the certificate. + + * If the certificate is not a self-signed certificate, provide the certificate chain. @@ -79 +81 @@ Fill in the **Certificate contents** section with the appropriate details. - 7. Choose **Import certificate** to complete the process and save the details for the imported certificate. + 8. Choose **Import certificate** to complete the process and save the details for the imported certificate.