AWS transfer documentation change
Summary
Added note about custom identity providers supporting more than 100 Active Directory groups
Security assessment
This change documents a service limit workaround but doesn't address security vulnerabilities or introduce security features. The group limit is a scalability constraint rather than a security issue.
Diff
diff --git a/transfer/latest/userguide/custom-idp-intro.md b/transfer/latest/userguide/custom-idp-intro.md index e391c058c..66317c77a 100644 --- a//transfer/latest/userguide/custom-idp-intro.md +++ b//transfer/latest/userguide/custom-idp-intro.md @@ -13 +13 @@ AWS Transfer Family offers several options for custom identity providers to auth -For most use cases, this is the recommended option. +For most use cases, this is the recommended option. Specifically, if you need to support more than 100 Active Directory groups, the custom identity provider solution offers a scalable alternative without group limitations. This solution is described in the blog post, [Simplify Active Directory authentication with a custom identity provider for AWS Transfer Family](https://aws.amazon.com/blogs/storage/simplify-active-directory-authentication-with-a-custom-identity-provider-for-aws-transfer-family/).