AWS Security ChangesHomeSearch

AWS transfer documentation change

Service: transfer · 2025-05-16 · Documentation medium

File: transfer/latest/userguide/create-server-sftp.md

Summary

Updated port configuration notes and security group requirements for VPC endpoints

Security assessment

Emphasizes security best practices for network configuration (VPC usage and port restrictions) but does not address a specific vulnerability.

Diff

diff --git a/transfer/latest/userguide/create-server-sftp.md b/transfer/latest/userguide/create-server-sftp.md
index fc3a16273..56fbb81ac 100644
--- a//transfer/latest/userguide/create-server-sftp.md
+++ b//transfer/latest/userguide/create-server-sftp.md
@@ -9 +9,7 @@ Secure Shell (SSH) File Transfer Protocol (SFTP) is a network protocol used for
-###### Note
+Note the following
+
+  * SFTP servers for Transfer Family operate over port 22. For VPC-hosted endpoints, SFTP Transfer Family servers can also operate over port 2222, 2223 or 22000. For details, see [Create a server in a virtual private cloud](./create-server-in-vpc.html).
+
+  * Public endpoints cannot restrict traffic via security groups. To use security groups with your Transfer Family server, you must host your server's endpoint inside a virtual private cloud (VPC) as described in [Create a server in a virtual private cloud](./create-server-in-vpc.html).
+
+
@@ -11 +16,0 @@ Secure Shell (SSH) File Transfer Protocol (SFTP) is a network protocol used for
-SFTP servers for Transfer Family operate over port 22. For VPC-hosted endpoints, SFTP Transfer Family servers can also operate over port 2222, 2223 or 22000. For details, see [Create a server in a virtual private cloud](./create-server-in-vpc.html).