AWS transfer medium security documentation change

Service: transfer · 2026-02-19 · Security-related medium

File: transfer/latest/userguide/fsx-s3-access-points.md

Summary

Changed note to important warning and clarified that IAM policies require Access Point ARN format instead of alias

Security assessment

Clarifies critical security configuration: using incorrect access point format could lead to misconfigured IAM policies and potential unauthorized access. Correct ARN format is essential for proper access control.

Diff

diff --git a/transfer/latest/userguide/fsx-s3-access-points.md b/transfer/latest/userguide/fsx-s3-access-points.md
index b7558625d..7618b3fd8 100644
--- a//transfer/latest/userguide/fsx-s3-access-points.md
+++ b//transfer/latest/userguide/fsx-s3-access-points.md
@@ -326 +326 @@ You must create an IAM role that grants Transfer Family access to the S3 access
-###### Note
+###### Important
@@ -328 +328 @@ You must create an IAM role that grants Transfer Family access to the S3 access
-In the IAM policy, use the access point alias where you would normally specify a bucket name.
+IAM policies require the Access Point ARN format, not the alias. Use the format `arn:aws:s3:region:account-id:accesspoint/access-point-name` in your IAM policy Resource statements. The access point alias (ending in `-ext-s3alias`) is only used for home directory mappings.