aws-sdk-transfer 1.146.0 → 1.148.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 0ba2122544e8d5692d74be6edd3d2c1149e250d9edd3b5a776876ae575925d1e
4
- data.tar.gz: ec351a563779bb118038714ab3409cdee6653f5f5575e8c1a2a50d7be5d5ebb4
3
+ metadata.gz: 57ff31a68b277637f5a019f348cc57cffdb037f301aa5346b602259479fad3de
4
+ data.tar.gz: 95e6941c974bf6bd3055d7caa2b2a95bd9837cd6e829c2fcbf425e05ff129b50
5
5
  SHA512:
6
- metadata.gz: 44b030b474ee2aaffd926cc978a3d21449269be1337edd9dceffa7d7909166abc169a9ca81164870ca6ff998297e2d33d3498a7859362f2ccec2e58903785e30
7
- data.tar.gz: 89c1207925a726583458e2b7ee787907ceae8781b72a902fb69aa6896b5e86f3040620cde885b4b81fcf0ab5df707368e47664856c8cc0b084f6446cad3dad37
6
+ metadata.gz: ea5b5b871be47c9dd2972ac5f23086615eda54a1aa3f7369296f972c161d6ec07a38bef4570437b4a014e4d7c5082b0012229e1990e7489b4455f986faf502db
7
+ data.tar.gz: 514a5e26be69c3f44f6e94bd709f511276ced85cc6c7eb617a5a93d1837c7862cc3dccb8791817c6bf46f6a17676a631f16a39576a45551ae77e0ba15fc339fa
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.148.0 (2026-10-01)
5
+ ------------------
6
+
7
+ * Feature - AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs.
8
+
9
+ 1.147.0 (2026-09-29)
10
+ ------------------
11
+
12
+ * Feature - AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably.
13
+
4
14
  1.146.0 (2026-09-15)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.146.0
1
+ 1.148.0
@@ -1269,6 +1269,9 @@ module Aws::Transfer
1269
1269
  # CloudWatch Logs, so that you can determine when the client is making
1270
1270
  # a `SETSTAT` call.
1271
1271
  #
1272
+ # * To specify which ports your Transfer Family server listens to, use
1273
+ # the `SftpPorts` parameter.
1274
+ #
1272
1275
  # * To determine whether your Transfer Family server resumes recent,
1273
1276
  # negotiated sessions through a unique session ID, use the
1274
1277
  # `TlsSessionResumptionMode` parameter.
@@ -1302,7 +1305,7 @@ module Aws::Transfer
1302
1305
  # To specify a log group, you must provide the ARN for an existing log
1303
1306
  # group. In this case, the format of the log group is as follows:
1304
1307
  #
1305
- # `arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1308
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1306
1309
  #
1307
1310
  # For example,
1308
1311
  # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
@@ -1384,6 +1387,12 @@ module Aws::Transfer
1384
1387
  # passive_ip: "PassiveIp",
1385
1388
  # tls_session_resumption_mode: "DISABLED", # accepts DISABLED, ENABLED, ENFORCED
1386
1389
  # set_stat_option: "DEFAULT", # accepts DEFAULT, ENABLE_NO_OP
1390
+ # sftp_ports: [
1391
+ # {
1392
+ # sftp_port: 1, # required
1393
+ # communication_mode: "CLIENT_TALK_FIRST", # accepts CLIENT_TALK_FIRST, SERVER_TALK_FIRST
1394
+ # },
1395
+ # ],
1387
1396
  # as_2_transports: ["HTTP"], # accepts HTTP
1388
1397
  # proxy_config: {
1389
1398
  # sftp_mode: "NONE", # accepts NONE, PROXY_PROTOCOL_V2_ENFORCED
@@ -1767,6 +1776,17 @@ module Aws::Transfer
1767
1776
  # Key-value pairs that can be used to group and search for workflows.
1768
1777
  # Tags are metadata attached to workflows for any purpose.
1769
1778
  #
1779
+ # @option params [Array<String>] :structured_log_destinations
1780
+ # Specifies the log groups to which your workflow logs are sent.
1781
+ #
1782
+ # To specify a log group, you must provide the ARN for an existing log
1783
+ # group. In this case, the format of the log group is as follows:
1784
+ #
1785
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1786
+ #
1787
+ # For example,
1788
+ # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
1789
+ #
1770
1790
  # @return [Types::CreateWorkflowResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1771
1791
  #
1772
1792
  # * {Types::CreateWorkflowResponse#workflow_id #workflow_id} => String
@@ -1893,6 +1913,7 @@ module Aws::Transfer
1893
1913
  # value: "TagValue", # required
1894
1914
  # },
1895
1915
  # ],
1916
+ # structured_log_destinations: ["Arn"],
1896
1917
  # })
1897
1918
  #
1898
1919
  # @example Response structure
@@ -2695,6 +2716,9 @@ module Aws::Transfer
2695
2716
  # resp.server.protocol_details.passive_ip #=> String
2696
2717
  # resp.server.protocol_details.tls_session_resumption_mode #=> String, one of "DISABLED", "ENABLED", "ENFORCED"
2697
2718
  # resp.server.protocol_details.set_stat_option #=> String, one of "DEFAULT", "ENABLE_NO_OP"
2719
+ # resp.server.protocol_details.sftp_ports #=> Array
2720
+ # resp.server.protocol_details.sftp_ports[0].sftp_port #=> Integer
2721
+ # resp.server.protocol_details.sftp_ports[0].communication_mode #=> String, one of "CLIENT_TALK_FIRST", "SERVER_TALK_FIRST"
2698
2722
  # resp.server.protocol_details.as_2_transports #=> Array
2699
2723
  # resp.server.protocol_details.as_2_transports[0] #=> String, one of "HTTP"
2700
2724
  # resp.server.protocol_details.proxy_config.sftp_mode #=> String, one of "NONE", "PROXY_PROTOCOL_V2_ENFORCED"
@@ -2981,6 +3005,8 @@ module Aws::Transfer
2981
3005
  # resp.workflow.tags #=> Array
2982
3006
  # resp.workflow.tags[0].key #=> String
2983
3007
  # resp.workflow.tags[0].value #=> String
3008
+ # resp.workflow.structured_log_destinations #=> Array
3009
+ # resp.workflow.structured_log_destinations[0] #=> String
2984
3010
  #
2985
3011
  # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DescribeWorkflow AWS API Documentation
2986
3012
  #
@@ -5154,6 +5180,9 @@ module Aws::Transfer
5154
5180
  # CloudWatch Logs, so that you can determine when the client is making
5155
5181
  # a `SETSTAT` call.
5156
5182
  #
5183
+ # * To specify which ports your Transfer Family server listens to, use
5184
+ # the `SftpPorts` parameter.
5185
+ #
5157
5186
  # * To determine whether your Transfer Family server resumes recent,
5158
5187
  # negotiated sessions through a unique session ID, use the
5159
5188
  # `TlsSessionResumptionMode` parameter.
@@ -5334,7 +5363,7 @@ module Aws::Transfer
5334
5363
  # To specify a log group, you must provide the ARN for an existing log
5335
5364
  # group. In this case, the format of the log group is as follows:
5336
5365
  #
5337
- # `arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`
5366
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
5338
5367
  #
5339
5368
  # For example,
5340
5369
  # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
@@ -5416,6 +5445,12 @@ module Aws::Transfer
5416
5445
  # passive_ip: "PassiveIp",
5417
5446
  # tls_session_resumption_mode: "DISABLED", # accepts DISABLED, ENABLED, ENFORCED
5418
5447
  # set_stat_option: "DEFAULT", # accepts DEFAULT, ENABLE_NO_OP
5448
+ # sftp_ports: [
5449
+ # {
5450
+ # sftp_port: 1, # required
5451
+ # communication_mode: "CLIENT_TALK_FIRST", # accepts CLIENT_TALK_FIRST, SERVER_TALK_FIRST
5452
+ # },
5453
+ # ],
5419
5454
  # as_2_transports: ["HTTP"], # accepts HTTP
5420
5455
  # proxy_config: {
5421
5456
  # sftp_mode: "NONE", # accepts NONE, PROXY_PROTOCOL_V2_ENFORCED
@@ -5780,7 +5815,7 @@ module Aws::Transfer
5780
5815
  tracer: tracer
5781
5816
  )
5782
5817
  context[:gem_name] = 'aws-sdk-transfer'
5783
- context[:gem_version] = '1.146.0'
5818
+ context[:gem_version] = '1.148.0'
5784
5819
  Seahorse::Client::Request.new(handlers, context)
5785
5820
  end
5786
5821
 
@@ -38,6 +38,7 @@ module Aws::Transfer
38
38
  CertificateStatusType = Shapes::StringShape.new(name: 'CertificateStatusType')
39
39
  CertificateType = Shapes::StringShape.new(name: 'CertificateType')
40
40
  CertificateUsageType = Shapes::StringShape.new(name: 'CertificateUsageType')
41
+ CommunicationMode = Shapes::StringShape.new(name: 'CommunicationMode')
41
42
  CompressionEnum = Shapes::StringShape.new(name: 'CompressionEnum')
42
43
  ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
43
44
  ConnectorEgressConfig = Shapes::UnionShape.new(name: 'ConnectorEgressConfig')
@@ -323,6 +324,8 @@ module Aws::Transfer
323
324
  SftpConnectorTrustedHostKey = Shapes::StringShape.new(name: 'SftpConnectorTrustedHostKey')
324
325
  SftpConnectorTrustedHostKeyList = Shapes::ListShape.new(name: 'SftpConnectorTrustedHostKeyList')
325
326
  SftpPort = Shapes::IntegerShape.new(name: 'SftpPort')
327
+ SftpPortWithOptions = Shapes::StructureShape.new(name: 'SftpPortWithOptions')
328
+ SftpPorts = Shapes::ListShape.new(name: 'SftpPorts')
326
329
  SigningAlg = Shapes::StringShape.new(name: 'SigningAlg')
327
330
  SourceFileLocation = Shapes::StringShape.new(name: 'SourceFileLocation')
328
331
  SourceIp = Shapes::StringShape.new(name: 'SourceIp')
@@ -583,6 +586,7 @@ module Aws::Transfer
583
586
  CreateWorkflowRequest.add_member(:steps, Shapes::ShapeRef.new(shape: WorkflowSteps, required: true, location_name: "Steps"))
584
587
  CreateWorkflowRequest.add_member(:on_exception_steps, Shapes::ShapeRef.new(shape: WorkflowSteps, location_name: "OnExceptionSteps"))
585
588
  CreateWorkflowRequest.add_member(:tags, Shapes::ShapeRef.new(shape: Tags, location_name: "Tags"))
589
+ CreateWorkflowRequest.add_member(:structured_log_destinations, Shapes::ShapeRef.new(shape: StructuredLogDestinations, location_name: "StructuredLogDestinations"))
586
590
  CreateWorkflowRequest.struct_class = Types::CreateWorkflowRequest
587
591
 
588
592
  CreateWorkflowResponse.add_member(:workflow_id, Shapes::ShapeRef.new(shape: WorkflowId, required: true, location_name: "WorkflowId"))
@@ -935,6 +939,7 @@ module Aws::Transfer
935
939
  DescribedWorkflow.add_member(:on_exception_steps, Shapes::ShapeRef.new(shape: WorkflowSteps, location_name: "OnExceptionSteps"))
936
940
  DescribedWorkflow.add_member(:workflow_id, Shapes::ShapeRef.new(shape: WorkflowId, location_name: "WorkflowId"))
937
941
  DescribedWorkflow.add_member(:tags, Shapes::ShapeRef.new(shape: Tags, location_name: "Tags"))
942
+ DescribedWorkflow.add_member(:structured_log_destinations, Shapes::ShapeRef.new(shape: StructuredLogDestinations, location_name: "StructuredLogDestinations"))
938
943
  DescribedWorkflow.struct_class = Types::DescribedWorkflow
939
944
 
940
945
  EfsFileLocation.add_member(:file_system_id, Shapes::ShapeRef.new(shape: EfsFileSystemId, location_name: "FileSystemId"))
@@ -1277,6 +1282,7 @@ module Aws::Transfer
1277
1282
  ProtocolDetails.add_member(:passive_ip, Shapes::ShapeRef.new(shape: PassiveIp, location_name: "PassiveIp"))
1278
1283
  ProtocolDetails.add_member(:tls_session_resumption_mode, Shapes::ShapeRef.new(shape: TlsSessionResumptionMode, location_name: "TlsSessionResumptionMode"))
1279
1284
  ProtocolDetails.add_member(:set_stat_option, Shapes::ShapeRef.new(shape: SetStatOption, location_name: "SetStatOption"))
1285
+ ProtocolDetails.add_member(:sftp_ports, Shapes::ShapeRef.new(shape: SftpPorts, location_name: "SftpPorts"))
1280
1286
  ProtocolDetails.add_member(:as_2_transports, Shapes::ShapeRef.new(shape: As2Transports, location_name: "As2Transports"))
1281
1287
  ProtocolDetails.add_member(:proxy_config, Shapes::ShapeRef.new(shape: ProxyConfig, location_name: "ProxyConfig"))
1282
1288
  ProtocolDetails.struct_class = Types::ProtocolDetails
@@ -1354,6 +1360,12 @@ module Aws::Transfer
1354
1360
 
1355
1361
  SftpConnectorTrustedHostKeyList.member = Shapes::ShapeRef.new(shape: SftpConnectorTrustedHostKey)
1356
1362
 
1363
+ SftpPortWithOptions.add_member(:sftp_port, Shapes::ShapeRef.new(shape: SftpPort, required: true, location_name: "SftpPort"))
1364
+ SftpPortWithOptions.add_member(:communication_mode, Shapes::ShapeRef.new(shape: CommunicationMode, location_name: "CommunicationMode"))
1365
+ SftpPortWithOptions.struct_class = Types::SftpPortWithOptions
1366
+
1367
+ SftpPorts.member = Shapes::ShapeRef.new(shape: SftpPortWithOptions)
1368
+
1357
1369
  SshPublicKey.add_member(:date_imported, Shapes::ShapeRef.new(shape: DateImported, required: true, location_name: "DateImported"))
1358
1370
  SshPublicKey.add_member(:ssh_public_key_body, Shapes::ShapeRef.new(shape: SshPublicKeyBody, required: true, location_name: "SshPublicKeyBody"))
1359
1371
  SshPublicKey.add_member(:ssh_public_key_id, Shapes::ShapeRef.new(shape: SshPublicKeyId, required: true, location_name: "SshPublicKeyId"))
@@ -1075,6 +1075,9 @@ module Aws::Transfer
1075
1075
  # to Amazon CloudWatch Logs, so that you can determine when the
1076
1076
  # client is making a `SETSTAT` call.
1077
1077
  #
1078
+ # * To specify which ports your Transfer Family server listens to, use
1079
+ # the `SftpPorts` parameter.
1080
+ #
1078
1081
  # * To determine whether your Transfer Family server resumes recent,
1079
1082
  # negotiated sessions through a unique session ID, use the
1080
1083
  # `TlsSessionResumptionMode` parameter.
@@ -1112,7 +1115,7 @@ module Aws::Transfer
1112
1115
  # To specify a log group, you must provide the ARN for an existing log
1113
1116
  # group. In this case, the format of the log group is as follows:
1114
1117
  #
1115
- # `arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1118
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1116
1119
  #
1117
1120
  # For example,
1118
1121
  # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
@@ -1498,13 +1501,26 @@ module Aws::Transfer
1498
1501
  # Tags are metadata attached to workflows for any purpose.
1499
1502
  # @return [Array<Types::Tag>]
1500
1503
  #
1504
+ # @!attribute [rw] structured_log_destinations
1505
+ # Specifies the log groups to which your workflow logs are sent.
1506
+ #
1507
+ # To specify a log group, you must provide the ARN for an existing log
1508
+ # group. In this case, the format of the log group is as follows:
1509
+ #
1510
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
1511
+ #
1512
+ # For example,
1513
+ # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
1514
+ # @return [Array<String>]
1515
+ #
1501
1516
  # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/CreateWorkflowRequest AWS API Documentation
1502
1517
  #
1503
1518
  class CreateWorkflowRequest < Struct.new(
1504
1519
  :description,
1505
1520
  :steps,
1506
1521
  :on_exception_steps,
1507
- :tags)
1522
+ :tags,
1523
+ :structured_log_destinations)
1508
1524
  SENSITIVE = []
1509
1525
  include Aws::Structure
1510
1526
  end
@@ -3160,6 +3176,9 @@ module Aws::Transfer
3160
3176
  # to Amazon CloudWatch Logs, so that you can determine when the
3161
3177
  # client is making a `SETSTAT` call.
3162
3178
  #
3179
+ # * To specify which ports your Transfer Family server listens to, use
3180
+ # the `SftpPorts` parameter.
3181
+ #
3163
3182
  # * To determine whether your Transfer Family server resumes recent,
3164
3183
  # negotiated sessions through a unique session ID, use the
3165
3184
  # `TlsSessionResumptionMode` parameter.
@@ -3343,7 +3362,7 @@ module Aws::Transfer
3343
3362
  # To specify a log group, you must provide the ARN for an existing log
3344
3363
  # group. In this case, the format of the log group is as follows:
3345
3364
  #
3346
- # `arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`
3365
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
3347
3366
  #
3348
3367
  # For example,
3349
3368
  # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
@@ -3776,6 +3795,18 @@ module Aws::Transfer
3776
3795
  # Tags are metadata attached to workflows for any purpose.
3777
3796
  # @return [Array<Types::Tag>]
3778
3797
  #
3798
+ # @!attribute [rw] structured_log_destinations
3799
+ # Specifies the log groups to which your workflow logs are sent.
3800
+ #
3801
+ # To specify a log group, you must provide the ARN for an existing log
3802
+ # group. In this case, the format of the log group is as follows:
3803
+ #
3804
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
3805
+ #
3806
+ # For example,
3807
+ # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
3808
+ # @return [Array<String>]
3809
+ #
3779
3810
  # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DescribedWorkflow AWS API Documentation
3780
3811
  #
3781
3812
  class DescribedWorkflow < Struct.new(
@@ -3784,7 +3815,8 @@ module Aws::Transfer
3784
3815
  :steps,
3785
3816
  :on_exception_steps,
3786
3817
  :workflow_id,
3787
- :tags)
3818
+ :tags,
3819
+ :structured_log_destinations)
3788
3820
  SENSITIVE = []
3789
3821
  include Aws::Structure
3790
3822
  end
@@ -5868,6 +5900,37 @@ module Aws::Transfer
5868
5900
  # </note>
5869
5901
  # @return [String]
5870
5902
  #
5903
+ # @!attribute [rw] sftp_ports
5904
+ # A property used with Transfer Family servers that use the SFTP
5905
+ # protocol and have `PUBLIC` endpoints. This property accepts a list
5906
+ # of up to three port configurations that the service opens on the
5907
+ # server endpoint.
5908
+ #
5909
+ # Each entry in the list consists of two parameters, the `SftpPort`
5910
+ # and the `CommunicationMode`. The `SftpPort` takes any integer from
5911
+ # 2000 to 65535, or 22. `CommunicationMode` can be one of the
5912
+ # following options:
5913
+ #
5914
+ # * `SERVER_TALK_FIRST`: The server responds to initial TCP
5915
+ # connections first. Many older clients expect that an SFTP server
5916
+ # responds with its server string before starting SSH negotiations.
5917
+ #
5918
+ # * `CLIENT_TALK_FIRST`: The server responds to the initial TCP
5919
+ # connection only after receiving a data packet. Most modern clients
5920
+ # support this behavior and send their client string along with the
5921
+ # initial data packets for SSH negotiation. Additionally, this mode
5922
+ # is more resilient to TCP retransmissions that can occur during the
5923
+ # initial TCP connection.
5924
+ #
5925
+ # The following is an `SftpPorts` example for port 2222 with
5926
+ # `CLIENT_TALK_FIRST`.
5927
+ #
5928
+ # `[ { "SftpPort": 2222, "CommunicationMode": "CLIENT_TALK_FIRST" } ]`
5929
+ #
5930
+ # If you don't specify any configurations during `CreateServer`, the
5931
+ # service uses port 22 with `SERVER_TALK_FIRST` by default.
5932
+ # @return [Array<Types::SftpPortWithOptions>]
5933
+ #
5871
5934
  # @!attribute [rw] as_2_transports
5872
5935
  # Indicates the transport method for the AS2 messages. Currently, only
5873
5936
  # HTTP is supported.
@@ -5889,6 +5952,7 @@ module Aws::Transfer
5889
5952
  :passive_ip,
5890
5953
  :tls_session_resumption_mode,
5891
5954
  :set_stat_option,
5955
+ :sftp_ports,
5892
5956
  :as_2_transports,
5893
5957
  :proxy_config)
5894
5958
  SENSITIVE = []
@@ -5897,8 +5961,8 @@ module Aws::Transfer
5897
5961
 
5898
5962
  # Contains configuration for PROXY protocol version 2 (PPv2) support on
5899
5963
  # an Transfer Family server. When enabled, Transfer Family reads the
5900
- # added PPv2 header from incoming connections to extract the original
5901
- # client IP address. This address is then available in Amazon CloudWatch
5964
+ # added PPv2 header from incoming connections to extract the client's
5965
+ # source IP address. This address is then available in Amazon CloudWatch
5902
5966
  # Logs entries and is passed to custom identity providers during
5903
5967
  # authentication, enabling IP-based access policies. For more
5904
5968
  # information, see [Working with Network Load Balancers][1].
@@ -5909,29 +5973,28 @@ module Aws::Transfer
5909
5973
  #
5910
5974
  # @!attribute [rw] sftp_mode
5911
5975
  # Specifies whether the Transfer Family server requires or ignores a
5912
- # PPv2 header containing the original client IP address on incoming
5976
+ # PPv2 header containing the client's source IP address on incoming
5913
5977
  # SFTP connections. If you don't specify a value, the default is
5914
5978
  # `NONE`
5915
5979
  #
5916
5980
  # * `NONE`: the server reads and ignores any PPv2 header on incoming
5917
5981
  # SFTP connections. This is the default value. Use this value when
5918
5982
  # your SFTP server is not behind an NLB, or when you do not need to
5919
- # preserve client source IP addresses through an NLB.
5983
+ # preserve the client's source IP address through an NLB.
5920
5984
  #
5921
5985
  # * `PROXY_PROTOCOL_V2_ENFORCED`: the server requires a valid PPv2
5922
5986
  # header on every incoming SFTP connection. When a valid header is
5923
- # present, the server applies it and uses the client IP address from
5987
+ # present, the server applies it and uses the source IP address from
5924
5988
  # the header. If a connection arrives without a PPv2 header, the
5925
5989
  # server refuses the connection and logs an error to Amazon
5926
5990
  # CloudWatch Logs indicating that the expected PPv2 header was
5927
5991
  # missing. Use this value when your SFTP server is behind an NLB
5928
5992
  # with PPv2 enabled on the target group.
5929
5993
  #
5930
- # When you enable `PROXY_PROTOCOL_V2_ENFORCED`, the server trusts
5931
- # the source IP address in the PPv2 header. You must configure
5932
- # security groups on your server's VPC endpoint to restrict inbound
5933
- # traffic to only the NLB's private IP addresses. For the full
5934
- # requirements, see [Working with Network Load Balancers][1].
5994
+ # With `PROXY_PROTOCOL_V2_ENFORCED` you must restrict the server's
5995
+ # VPC endpoint security group to allow inbound traffic only via the
5996
+ # trusted NLB. For more information, see [Working with Network Load
5997
+ # Balancers][1].
5935
5998
  #
5936
5999
  #
5937
6000
  #
@@ -6289,6 +6352,33 @@ module Aws::Transfer
6289
6352
  include Aws::Structure
6290
6353
  end
6291
6354
 
6355
+ # Specifies the configuration for a single SFTP port on a Transfer
6356
+ # Family server that uses the SFTP protocol and has a `PUBLIC` endpoint.
6357
+ # Each entry in the `SftpPorts` list is an `SftpPortWithOptions` object
6358
+ # that pairs a port number with a communication mode.
6359
+ #
6360
+ # @!attribute [rw] sftp_port
6361
+ # The port on which the Transfer Family server listens for SFTP
6362
+ # connections. Specify any integer from 2000 to 65535, or 22. This
6363
+ # value is required for each entry in the `SftpPorts` list.
6364
+ # @return [Integer]
6365
+ #
6366
+ # @!attribute [rw] communication_mode
6367
+ # Determines whether the server or the client sends data first when a
6368
+ # client establishes an SFTP connection on this port. Valid values are
6369
+ # `SERVER_TALK_FIRST` and `CLIENT_TALK_FIRST`. For a description of
6370
+ # each mode, see the `SftpPorts` property. This value is optional.
6371
+ # @return [String]
6372
+ #
6373
+ # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/SftpPortWithOptions AWS API Documentation
6374
+ #
6375
+ class SftpPortWithOptions < Struct.new(
6376
+ :sftp_port,
6377
+ :communication_mode)
6378
+ SENSITIVE = []
6379
+ include Aws::Structure
6380
+ end
6381
+
6292
6382
  # Provides information about the public Secure Shell (SSH) key that is
6293
6383
  # associated with a Transfer Family user for the specific file transfer
6294
6384
  # protocol-enabled server (as identified by `ServerId`). The information
@@ -7427,6 +7517,9 @@ module Aws::Transfer
7427
7517
  # to Amazon CloudWatch Logs, so that you can determine when the
7428
7518
  # client is making a `SETSTAT` call.
7429
7519
  #
7520
+ # * To specify which ports your Transfer Family server listens to, use
7521
+ # the `SftpPorts` parameter.
7522
+ #
7430
7523
  # * To determine whether your Transfer Family server resumes recent,
7431
7524
  # negotiated sessions through a unique session ID, use the
7432
7525
  # `TlsSessionResumptionMode` parameter.
@@ -7619,7 +7712,7 @@ module Aws::Transfer
7619
7712
  # To specify a log group, you must provide the ARN for an existing log
7620
7713
  # group. In this case, the format of the log group is as follows:
7621
7714
  #
7622
- # `arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`
7715
+ # `arn:partition:logs:region-name:amazon-account-id:log-group:log-group-name:*`
7623
7716
  #
7624
7717
  # For example,
7625
7718
  # `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`
@@ -55,7 +55,7 @@ module Aws::Transfer
55
55
  autoload :EndpointProvider, 'aws-sdk-transfer/endpoint_provider'
56
56
  autoload :Endpoints, 'aws-sdk-transfer/endpoints'
57
57
 
58
- GEM_VERSION = '1.146.0'
58
+ GEM_VERSION = '1.148.0'
59
59
 
60
60
  end
61
61
 
data/sig/client.rbs CHANGED
@@ -322,7 +322,8 @@ module Aws
322
322
  key: ::String,
323
323
  value: ::String
324
324
  }
325
- ]
325
+ ],
326
+ ?structured_log_destinations: Array[::String]
326
327
  ) -> _CreateWorkflowResponseSuccess
327
328
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateWorkflowResponseSuccess
328
329
 
data/sig/params.rbs CHANGED
@@ -29,6 +29,12 @@ module Aws
29
29
  passive_ip: ::String?,
30
30
  tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")?,
31
31
  set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")?,
32
+ sftp_ports: Array[
33
+ {
34
+ sftp_port: ::Integer,
35
+ communication_mode: ("CLIENT_TALK_FIRST" | "SERVER_TALK_FIRST")?
36
+ }
37
+ ]?,
32
38
  as_2_transports: Array[("HTTP")]?,
33
39
  proxy_config: {
34
40
  sftp_mode: ("NONE" | "PROXY_PROTOCOL_V2_ENFORCED")?
data/sig/types.rbs CHANGED
@@ -208,6 +208,7 @@ module Aws::Transfer
208
208
  attr_accessor steps: ::Array[Types::WorkflowStep]
209
209
  attr_accessor on_exception_steps: ::Array[Types::WorkflowStep]
210
210
  attr_accessor tags: ::Array[Types::Tag]
211
+ attr_accessor structured_log_destinations: ::Array[::String]
211
212
  SENSITIVE: []
212
213
  end
213
214
 
@@ -693,6 +694,7 @@ module Aws::Transfer
693
694
  attr_accessor on_exception_steps: ::Array[Types::WorkflowStep]
694
695
  attr_accessor workflow_id: ::String
695
696
  attr_accessor tags: ::Array[Types::Tag]
697
+ attr_accessor structured_log_destinations: ::Array[::String]
696
698
  SENSITIVE: []
697
699
  end
698
700
 
@@ -1125,6 +1127,7 @@ module Aws::Transfer
1125
1127
  attr_accessor passive_ip: ::String
1126
1128
  attr_accessor tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")
1127
1129
  attr_accessor set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")
1130
+ attr_accessor sftp_ports: ::Array[Types::SftpPortWithOptions]
1128
1131
  attr_accessor as_2_transports: ::Array[("HTTP")]
1129
1132
  attr_accessor proxy_config: Types::ProxyConfig
1130
1133
  SENSITIVE: []
@@ -1208,6 +1211,12 @@ module Aws::Transfer
1208
1211
  SENSITIVE: []
1209
1212
  end
1210
1213
 
1214
+ class SftpPortWithOptions
1215
+ attr_accessor sftp_port: ::Integer
1216
+ attr_accessor communication_mode: ("CLIENT_TALK_FIRST" | "SERVER_TALK_FIRST")
1217
+ SENSITIVE: []
1218
+ end
1219
+
1211
1220
  class SshPublicKey
1212
1221
  attr_accessor date_imported: ::Time
1213
1222
  attr_accessor ssh_public_key_body: ::String
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-transfer
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.146.0
4
+ version: 1.148.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services