AWS cli documentation change
Summary
Added identity-provider-type parameter documentation and clarified security group/S3 optimization behavior
Security assessment
The change adds documentation for identity provider types and authentication methods, explaining security-related configurations. However, there's no evidence this addresses a specific vulnerability. The security group note clarifies existing behavior but doesn't fix an issue. The updates enhance security documentation without patching vulnerabilities.
Diff
diff --git a/cli/latest/reference/transfer/update-server.md b/cli/latest/reference/transfer/update-server.md index 3f89a21d9..0f89329b3 100644 --- a//cli/latest/reference/transfer/update-server.md +++ b//cli/latest/reference/transfer/update-server.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -84,0 +85 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/transf + [--identity-provider-type <value>] @@ -320,0 +322,2 @@ JSON Syntax: +>> While `SecurityGroupIds` appears in the response syntax for consistency with `CreateServer` and `UpdateServer` operations, this field is not populated in `DescribeServer` responses. Security groups are managed at the VPC endpoint level and can be modified outside of the Transfer Family service. To retrieve current security group information, use the EC2 `DescribeVpcEndpoints` API with the `VpcEndpointId` returned in the response. +>> @@ -780 +783,6 @@ Syntax: -> Specifies whether or not performance for your Amazon S3 directories is optimized. This is disabled by default. +> Specifies whether or not performance for your Amazon S3 directories is optimized. +> +> * If using the console, this is enabled by default. +> * If using the API or CLI, this is disabled by default. +> + @@ -786 +794,6 @@ Syntax: ->> Specifies whether or not performance for your Amazon S3 directories is optimized. This is disabled by default. +>> Specifies whether or not performance for your Amazon S3 directories is optimized. +>> +>> * If using the console, this is enabled by default. +>> * If using the API or CLI, this is disabled by default. +>> + @@ -834,0 +848,19 @@ JSON Syntax: +`--identity-provider-type` (string) + +> The mode of authentication for a server. The default value is `SERVICE_MANAGED` , which allows you to store and access user credentials within the Transfer Family service. +> +> Use `AWS_DIRECTORY_SERVICE` to provide access to Active Directory groups in Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in Amazon Web Services using AD Connector. This option also requires you to provide a Directory ID by using the `IdentityProviderDetails` parameter. +> +> Use the `API_GATEWAY` value to integrate with an identity provider of your choosing. The `API_GATEWAY` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the `IdentityProviderDetails` parameter. +> +> Use the `AWS_LAMBDA` value to directly use an Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the `Function` parameter for the `IdentityProviderDetails` data type. +> +> Possible values: +> +> * `SERVICE_MANAGED` +> * `API_GATEWAY` +> * `AWS_DIRECTORY_SERVICE` +> * `AWS_LAMBDA` +> + + @@ -956 +988 @@ ServerId -> (string) - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) »