AWS AWSCloudFormation documentation change
Summary
Added clarification about security group management for Transfer Family servers
Security assessment
Documents security group management practices but does not address a specific vulnerability - improves operational understanding of security controls
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-transfer-server-endpointdetails.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-transfer-server-endpointdetails.md index 7422ad7cb..c15a2a942 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-transfer-server-endpointdetails.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-transfer-server-endpointdetails.md @@ -84,0 +85,2 @@ A list of security groups IDs that are available to attach to your server's endp +While `SecurityGroupIds` appears in the response syntax for consistency with `CreateServer` and `UpdateServer` operations, this field is not populated in `DescribeServer` responses. Security groups are managed at the VPC endpoint level and can be modified outside of the Transfer Family service. To retrieve current security group information, use the EC2 `DescribeVpcEndpoints` API with the `VpcEndpointId` returned in the response. +