AWS cli: Transfer Family list-host-keys: expose StorageType and SecretId fields

Service: cli · 2026-10-15 · Documentation medium

File: cli/latest/reference/transfer/list-host-keys.md

Summary

Added StorageType and SecretId fields to each HostKeys entry in the list-host-keys CLI reference, indicating whether host key material is service managed or stored in a Secrets Manager secret and its ARN.

Security assessment

Documents new list output that surfaces where private host key material is stored, supporting inventory/audit of secret-backed host keys; no specific vulnerability is addressed.

Evidence

+>> The ARN of the Secrets Manager secret that stores the host key material, when `StorageType` is `SECRETS_MANAGER` .

Diff

diff --git a/cli/latest/reference/transfer/list-host-keys.md b/cli/latest/reference/transfer/list-host-keys.md
index 79ff927..1be518e 100644
--- a//cli/latest/reference/transfer/list-host-keys.md
+++ b//cli/latest/reference/transfer/list-host-keys.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
@@ -327,0 +328,22 @@ HostKeys -> (list)
+>> 
+>> StorageType -> (string)
+>>
+>>> Specifies whether the host key is stored by Transfer Family (`SERVICE_MANAGED` ) or in Secrets Manager (`SECRETS_MANAGER` ).
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `SERVICE_MANAGED`
+>>>   * `SECRETS_MANAGER`
+>>> 
+
+>> 
+>> SecretId -> (string)
+>>
+>>> The ARN of the Secrets Manager secret that stores the host key material, when `StorageType` is `SECRETS_MANAGER` .
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `2048`
+>>> 
+
@@ -339 +361 @@ HostKeys -> (list)
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »