AWS transfer medium security documentation change
Summary
Updated identity provider configuration instructions and removed legacy content
Security assessment
Allows changing identity provider types post-creation, which impacts authentication security. Removes previous restriction that required server deletion to change providers, potentially addressing security configuration flexibility issues
Diff
diff --git a/transfer/latest/userguide/edit-server-config.md b/transfer/latest/userguide/edit-server-config.md index ee18d935a..cb0959e9c 100644 --- a//transfer/latest/userguide/edit-server-config.md +++ b//transfer/latest/userguide/edit-server-config.md @@ -5 +5 @@ -Edit the file transfer protocolsEdit custom identity provider parametersEdit the server endpointEdit loggingEdit the security policyChange the managed workflowChange the display banners for your serverPut your server online or offline +Edit the file transfer protocolsEdit the server endpointEdit loggingEdit the security policyChange the managed workflowChange the display banners for your serverPut your server online or offline @@ -15,2 +14,0 @@ After you create an AWS Transfer Family server, you can edit the server configur - * Edit custom identity provider parameters - @@ -44,5 +42 @@ You can change the server's properties on this page by choosing **Edit** : - * For the identity provider, note that you can't change a server's identity provider type after you create the server. To change the identity provider, delete the server and create a new one with the identity provider that you want. - -###### Note - -If your server uses a custom identity provider, you can edit some properties. For details, see Edit custom identity provider parameters. + * For the identity provider, you can now change between any identity provider types (service-managed, AWS Directory Service, or custom identity provider). For details about changing identity provider types and the required information for each transition, see [Edit identity provider configuration](./configuring-servers-edit-custom-idp.html). @@ -156,15 +149,0 @@ The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or -## Edit custom identity provider parameters - -On the AWS Transfer Family console, for custom identity providers, you can change some of the settings, depending on whether you are using a Lambda function or an API Gateway. In either case, if your server uses the SFTP protocol, you can edit your authentication method. - - * If you are using a Lambda as your identity provider, you can change the underlying Lambda function. - - - - * If you are using an API Gateway as your identity provider, you can update the Gateway URL or the invocation role, or both. - - - - - - @@ -373 +352 @@ IPv6 support -Manage server host keys +Edit identity provider configuration