AWS cli: Transfer Family create-server: add --host-key-storage-type option
Summary
Added the --host-key-storage-type parameter to the Transfer Family create-server CLI reference, documenting SERVICE_MANAGED versus SECRETS_MANAGER storage, where SECRETS_MANAGER stores the private host key material in an AWS Secrets Manager secret.
Security assessment
The new option lets customers keep SFTP server private host key material out of Transfer Family's managed store and inside Secrets Manager, a credential-protection improvement being documented; it describes a feature rather than a fixed vulnerability.
Evidence
+> Specifies whether the host key is stored by Transfer Family (`SERVICE_MANAGED` ) or in Secrets Manager (`SECRETS_MANAGER` ). When you specify `SECRETS_MANAGER` , Transfer Family stores the private host key material in an Secrets Manager secret.
Diff
diff --git a/cli/latest/reference/transfer/create-server.md b/cli/latest/reference/transfer/create-server.md index 6a62dfb..5684238 100644 --- a//cli/latest/reference/transfer/create-server.md +++ b//cli/latest/reference/transfer/create-server.md @@ -15 +15 @@ - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) » @@ -84,0 +85 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/transf + [--host-key-storage-type <value>] @@ -1011,0 +1013,11 @@ JSON Syntax: +`--host-key-storage-type` (string) + +> Specifies whether the host key is stored by Transfer Family (`SERVICE_MANAGED` ) or in Secrets Manager (`SECRETS_MANAGER` ). When you specify `SECRETS_MANAGER` , Transfer Family stores the private host key material in an Secrets Manager secret. +> +> Possible values: +> +> * `SERVICE_MANAGED` +> * `SECRETS_MANAGER` +> + + @@ -1147 +1159 @@ ServerId -> (string) - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) »