AWS transfer documentation change

Service: transfer · 2025-05-16 · Documentation low

File: transfer/latest/userguide/as2-for-transfer-family.md

Summary

Added comprehensive documentation for AS2 CloudFormation templates including security best practices

Security assessment

While the changes include security recommendations (certificate management, IAM policies, network restrictions), there is no evidence of addressing a specific security vulnerability. The changes primarily document deployment best practices.

Diff

diff --git a/transfer/latest/userguide/as2-for-transfer-family.md b/transfer/latest/userguide/as2-for-transfer-family.md
index e0f9330ac..4281f7183 100644
--- a//transfer/latest/userguide/as2-for-transfer-family.md
+++ b//transfer/latest/userguide/as2-for-transfer-family.md
@@ -5 +5 @@
-AS2 use cases
+AS2 use casesAS2 CloudFormation templates
@@ -108,0 +109,98 @@ Now you and your trading partner can exchange encrypted messages, and you can bo
+## AS2 CloudFormation templates
+
+This topic provides information about AWS CloudFormation templates that you can use to quickly deploy AS2 servers and configurations for AWS Transfer Family. These templates automate the setup process and help you implement best practices for AS2 file transfers.
+
+  * The basic AS2 template is described in [Use a template to create a demo Transfer Family AS2 stack](./create-as2-transfer-server.html#as2-cfn-demo-template)
+
+  * The AS2 template for customizing HTTP headers is described in [Customize HTTP headers for AS2 messages](./as2-custom-http-headers.html).
+
+
+
+
+### Customizing AS2 templates
+
+You can customize the provided templates to meet your specific requirements:
+
+  1. Download the template from the S3 URL.
+
+  2. Modify the YAML code to adjust configurations such as:
+
+     * Security settings and certificate configurations
+
+     * Network architecture and VPC settings
+
+     * Storage options and file handling
+
+     * Monitoring and notification preferences
+
+  3. Upload your modified template to your own S3 bucket.
+
+  4. Deploy the customized template using the AWS CloudFormation console or AWS CLI.
+
+
+
+
+###### Important
+
+When customizing templates, ensure that you maintain the dependencies between resources and follow security best practices.
+
+### Testing your AS2 deployment
+
+After deploying an AS2 server using a template, you can test the configuration:
+
+  1. Check the CloudFormation stack outputs for sample commands and endpoint information.
+
+  2. Use the AWS CLI to send a test file:
+    
+        aws s3api put-object --bucket your-bucket-name --key test.txt --body test.txt
+    aws transfer start-file-transfer --connector-id your-connector-id --send-file-paths /your-bucket-name/test.txt
+
+  3. Verify file delivery in the destination S3 bucket.
+
+  4. Check CloudWatch logs for successful processing and MDN responses.
+
+
+
+
+For more comprehensive testing, consider using third-party AS2 clients to send files to your Transfer Family AS2 server.
+
+### Best practices for AS2 template deployment
+
+Follow these best practices when using AS2 CloudFormation templates:
+
+Security
+    
+
+Use strong certificates and rotate them regularly.
+
+Implement least-privilege IAM policies.
+
+Restrict network access using security groups.
+
+Reliability
+    
+
+Deploy across multiple Availability Zones.
+
+Implement monitoring and alerting for failed transfers.
+
+Set up automated retries for failed transfers.
+
+Performance
+    
+
+Choose appropriate instance types for your transfer volume.
+
+Implement S3 lifecycle policies for efficient file management.
+
+Monitor and optimize network configurations.
+
+Cost Optimization
+    
+
+Use auto-scaling for variable workloads.
+
+Implement S3 storage classes for older files.
+
+Monitor and adjust resources based on actual usage.
+