AWS transfer documentation change
Summary
Added VPC Lattice connector logging examples and documentation
Security assessment
Documents enhanced logging capabilities specifically for VPC Lattice connectors including security-related fields like 'egress-type' and VPC configuration details. While improves observability, no direct security vulnerability addressed.
Diff
diff --git a/transfer/latest/userguide/cw-example-logs.md b/transfer/latest/userguide/cw-example-logs.md index de1279afe..37b4c06e6 100644 --- a//transfer/latest/userguide/cw-example-logs.md +++ b//transfer/latest/userguide/cw-example-logs.md @@ -5 +5 @@ -Example transfer sessions log entriesExample log entries for SFTP connectorsExample log entries for Key exchange algorithm failures +Example transfer sessions log entriesExample log entries for SFTP connectorsExample log entries for VPC Lattice connectorsExample log entries for Key exchange algorithm failures @@ -16,0 +17,2 @@ This topic presents example log entries. + * Example log entries for VPC Lattice connectors + @@ -97,2 +99,3 @@ This log entry is for a transfer that completed successfully. - "local-directory-path": "/connectors-localbucket" - "bytes": 514 + "local-directory-path": "/connectors-localbucket", + "bytes": 514, + "egress-type": "SERVICE_MANAGED" @@ -117 +120,2 @@ This log entry is for a transfer that timed out, and thus was not completed succ - "local-directory-path": "/connectors-localbucket" + "local-directory-path": "/connectors-localbucket", + "egress-type": "SERVICE_MANAGED" @@ -136 +140,2 @@ This log entry is for a SEND operation that succeeds. - "bytes": 275 + "bytes": 275, + "egress-type": "SERVICE_MANAGED" @@ -149,0 +155,37 @@ Descriptions for some key fields in the previous log examples. +## Example log entries for VPC Lattice connectors + +This section contains example logs for VPC Lattice connectors. For VPC Lattice connectors, logs include additional fields that provide information about the connector configuration and network setup. + +This log entry is for a VPC Lattice connector SEND operation that completed successfully. + + + { + "operation": "SEND", + "timestamp": "2025-09-05T14:20:19.577192454Z", + "connector-id": "connector-id", + "transfer-id": "transfer-id", + "file-transfer-id": "transfer-id/file-transfer-id", + "file-path": ""/amzn-s3-demo-bucket/my-test-folder/connector-vpc-lattice-us-east-1-2025-03-22.csv"", + "status-code": "COMPLETED", + "start-time": "2025-09-05T14:20:19.434072509Z", + "end-time": "2025-09-05T14:20:19.481453346Z", + "account-id": "account-id", + "connector-arn": "arn:aws:transfer:us-east-1:account-id:connector/connector-id", + "remote-directory-path": "/test-bucket/test-folder/", + "bytes": 262, + "egress-type": "VPC_LATTICE", + "vpc-lattice-resource-configuration-arn": "arn:aws:vpc-lattice:us-east-1:account-id:resourceconfiguration/resource-configuration-arn-id, + "vpc-lattice-port-number": 22 + } + +VPC Lattice connector logs include the following additional fields: + + * `egress-type` \- Type of egress configuration for the connector + + * `vpc-lattice-resource-configuration-arn` \- ARN of the VPC Lattice Resource Configuration that defines the target SFTP server location + + * `vpc-lattice-port-number` \- Port number for connecting to the SFTP server through VPC Lattice + + + +