AWS cli medium security documentation change

Service: cli · 2025-10-01 · Security-related medium

File: cli/latest/reference/transfer/describe-server.md

Summary

Added SecurityGroupIds clarification and S3 optimization defaults

Security assessment

Reiterates the SecurityGroupIds management pattern to prevent misconfiguration risks. Duplicates security-relevant information from create-server.md for consistency.

Diff

diff --git a/cli/latest/reference/transfer/describe-server.md b/cli/latest/reference/transfer/describe-server.md
index ed9e10dd0..3ab470504 100644
--- a//cli/latest/reference/transfer/describe-server.md
+++ b//cli/latest/reference/transfer/describe-server.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -406,0 +407,2 @@ Server -> (structure)
+>>> While `SecurityGroupIds` appears in the response syntax for consistency with `CreateServer` and `UpdateServer` operations, this field is not populated in `DescribeServer` responses. Security groups are managed at the VPC endpoint level and can be modified outside of the Transfer Family service. To retrieve current security group information, use the EC2 `DescribeVpcEndpoints` API with the `VpcEndpointId` returned in the response.
+>>> 
@@ -825 +827,6 @@ Server -> (structure)
->> Specifies whether or not performance for your Amazon S3 directories is optimized. This is disabled by default.
+>> Specifies whether or not performance for your Amazon S3 directories is optimized.
+>> 
+>>   * If using the console, this is enabled by default.
+>>   * If using the API or CLI, this is disabled by default.
+>> 
+
@@ -831 +838,6 @@ Server -> (structure)
->>> Specifies whether or not performance for your Amazon S3 directories is optimized. This is disabled by default.
+>>> Specifies whether or not performance for your Amazon S3 directories is optimized.
+>>> 
+>>>   * If using the console, this is enabled by default.
+>>>   * If using the API or CLI, this is disabled by default.
+>>> 
+
@@ -890 +902 @@ Server -> (structure)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »