AWS cli: Transfer Family describe-host-key: expose StorageType and SecretId fields

Service: cli · 2026-10-15 · Documentation medium

File: cli/latest/reference/transfer/describe-host-key.md

Summary

Added the StorageType (SERVICE_MANAGED | SECRETS_MANAGER) and SecretId (Secrets Manager secret ARN holding host key material) response fields to the describe-host-key CLI reference.

Security assessment

Documents new output fields that reveal where a server's host key private material is stored, aiding auditing of secret-backed key storage; no vulnerability or exploit is referenced.

Evidence

+>> The ARN of the Secrets Manager secret that stores the host key material, when `StorageType` is `SECRETS_MANAGER` .

Diff

diff --git a/cli/latest/reference/transfer/describe-host-key.md b/cli/latest/reference/transfer/describe-host-key.md
index 0b21d9f..0432b3a 100644
--- a//cli/latest/reference/transfer/describe-host-key.md
+++ b//cli/latest/reference/transfer/describe-host-key.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
@@ -326,0 +327,22 @@ HostKey -> (structure)
+> 
+> StorageType -> (string)
+>
+>> Specifies whether the host key is stored by Transfer Family (`SERVICE_MANAGED` ) or in Secrets Manager (`SECRETS_MANAGER` ).
+>> 
+>> Possible values:
+>> 
+>>   * `SERVICE_MANAGED`
+>>   * `SECRETS_MANAGER`
+>> 
+
+> 
+> SecretId -> (string)
+>
+>> The ARN of the Secrets Manager secret that stores the host key material, when `StorageType` is `SECRETS_MANAGER` .
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `2048`
+>> 
+
@@ -338 +360 @@ HostKey -> (structure)
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »