AWS transfer documentation change

Service: transfer · 2025-10-22 · Documentation low

File: transfer/latest/userguide/auth-issues.md

Summary

Added documentation for 'Duplicate Amazon S3 buckets in web app' authentication issue, including cause and solution

Security assessment

The change documents a user interface issue where duplicate S3 buckets appear due to overlapping Active Directory group grants. While it addresses access management, there's no evidence of a security vulnerability being patched or exploited.

Diff

diff --git a/transfer/latest/userguide/auth-issues.md b/transfer/latest/userguide/auth-issues.md
index ac9b8f5ab..f40d80da9 100644
--- a//transfer/latest/userguide/auth-issues.md
+++ b//transfer/latest/userguide/auth-issues.md
@@ -5 +5 @@
-Authentication failures—SSH/SFTP Managed AD mismatched realms issueActive Directory group limits exceededMiscellaneous authentication issuesTroubleshoot Amazon API Gateway issuesTroubleshoot testing your identity provider
+Authentication failures—SSH/SFTP Managed AD mismatched realms issueActive Directory group limits exceededMiscellaneous authentication issuesTroubleshoot Amazon API Gateway issuesTroubleshoot testing your identity providerDuplicate Amazon S3 buckets in web app
@@ -24,0 +25,2 @@ This section describes possible solutions for the following authentication issue
+  * Duplicate Amazon S3 buckets in web app
+
@@ -202,0 +205,14 @@ Make sure that you are using the correct credentials for your user, and make upd
+## Duplicate Amazon S3 buckets in web app
+
+Description
+
+The same Amazon S3 bucket appears multiple times in the Transfer Family web app interface.
+
+Cause
+
+This occurs when a user belongs to multiple Active Directory groups that have grants to the same Amazon S3 bucket. The web app lists all top-level grants associated with the user's UID or GID, including duplicate grants to the same bucket location.
+
+Solution
+
+To prevent duplicate listings, consolidate grants so each user has only one grant per Amazon S3 location. Review your Amazon S3 Access Grants configuration and remove redundant grants for the same bucket across different Active Directory groups.
+