AWS transfer documentation change
Summary
Updated port configuration notes and security group requirements for VPC endpoints
Security assessment
Emphasizes security best practices for network configuration (VPC usage and port restrictions) but does not address a specific vulnerability.
Diff
diff --git a/transfer/latest/userguide/create-server-sftp.md b/transfer/latest/userguide/create-server-sftp.md index fc3a16273..56fbb81ac 100644 --- a//transfer/latest/userguide/create-server-sftp.md +++ b//transfer/latest/userguide/create-server-sftp.md @@ -9 +9,7 @@ Secure Shell (SSH) File Transfer Protocol (SFTP) is a network protocol used for -###### Note +Note the following + + * SFTP servers for Transfer Family operate over port 22. For VPC-hosted endpoints, SFTP Transfer Family servers can also operate over port 2222, 2223 or 22000. For details, see [Create a server in a virtual private cloud](./create-server-in-vpc.html). + + * Public endpoints cannot restrict traffic via security groups. To use security groups with your Transfer Family server, you must host your server's endpoint inside a virtual private cloud (VPC) as described in [Create a server in a virtual private cloud](./create-server-in-vpc.html). + + @@ -11 +16,0 @@ Secure Shell (SSH) File Transfer Protocol (SFTP) is a network protocol used for -SFTP servers for Transfer Family operate over port 22. For VPC-hosted endpoints, SFTP Transfer Family servers can also operate over port 2222, 2223 or 22000. For details, see [Create a server in a virtual private cloud](./create-server-in-vpc.html).