AWS transfer documentation change
Summary
Added multiple notes about 100-group limit for Active Directory and custom identity provider recommendations
Security assessment
Reiterates service quota information without security implications. While exceeding group limits could cause operational issues, there's no evidence this relates to a security vulnerability or introduces security features.
Diff
diff --git a/transfer/latest/userguide/directory-services-users.md b/transfer/latest/userguide/directory-services-users.md index b737bda46..fbd34846e 100644 --- a//transfer/latest/userguide/directory-services-users.md +++ b//transfer/latest/userguide/directory-services-users.md @@ -67,0 +68,4 @@ To use AWS Managed Microsoft AD, you must perform the following steps: +###### Note + +AWS Transfer Family has a default limit of 100 Active Directory groups per server. If your use case requires more than 100 groups, consider using a custom identity provider solution as described in [Simplify Active Directory authentication with a custom identity provider for AWS Transfer Family](https://aws.amazon.com/blogs/storage/simplify-active-directory-authentication-with-a-custom-identity-provider-for-aws-transfer-family/). + @@ -185,0 +190,4 @@ After you create the server, you must choose which groups in the directory shoul +AWS Transfer Family has a default limit of 100 Active Directory groups per server. If your use case requires more than 100 groups, consider using a custom identity provider solution as described in [Simplify Active Directory authentication with a custom identity provider for AWS Transfer Family](https://aws.amazon.com/blogs/storage/simplify-active-directory-authentication-with-a-custom-identity-provider-for-aws-transfer-family/). + +###### Note +