AWS transfer documentation change

Service: transfer · 2025-08-16 · Documentation medium

File: transfer/latest/userguide/as2-troubleshooting.md

Summary

Added Certificate expiration monitoring issues section with troubleshooting guidance

Security assessment

Provides operational guidance for new security-related monitoring feature (certificate expiration) but doesn't address a specific security vulnerability.

Diff

diff --git a/transfer/latest/userguide/as2-troubleshooting.md b/transfer/latest/userguide/as2-troubleshooting.md
index 37fb89494..a940f919d 100644
--- a//transfer/latest/userguide/as2-troubleshooting.md
+++ b//transfer/latest/userguide/as2-troubleshooting.md
@@ -5 +5 @@
-Troubleshoot AS2 issuesAS2 certificate issuesAS2 MDN receipt issues
+Troubleshoot AS2 issuesAS2 certificate issuesAS2 MDN receipt issuesCertificate expiration monitoring issues
@@ -18,0 +19,2 @@ This section describes possible solutions for issues with AS2 transfers.
+  * Certificate expiration monitoring issues
+
@@ -79,0 +82,36 @@ Consider these solutions:
+## Certificate expiration monitoring issues
+
+This section provides solutions for common issues related to certificate expiration monitoring and the DaysUntilExpiry metric.
+
+### DaysUntilExpiry metric not appearing
+
+**Problem:** The DaysUntilExpiry metric is not visible in Amazon CloudWatch after importing a certificate.
+
+**Solution:**
+
+  * Wait up to 24 hours after importing the certificate. It can take up to a full day for Transfer Family to emit the metric to your account.
+
+  * Ensure you're looking in the correct AWS region and under the `AWS/Transfer` namespace in CloudWatch.
+
+
+
+
+### Certificate expiration alarms not triggering
+
+**Problem:** CloudWatch alarms for certificate expiration are not triggering when expected.
+
+**Solution:**
+
+  * Verify that the alarm is configured with the `Maximum` statistic and a period of 1 day.
+
+  * Check that the threshold comparison is set to `Less than or equal to` the desired number of days.
+
+  * Ensure that `Treat missing data as good (not breaching)` is selected in the alarm configuration.
+
+  * Verify that the alarm dimensions match your certificate's CertificateId and Description (if provided).
+
+  * Check that the alarm actions (SNS topics, email notifications) are properly configured and active.
+
+
+
+