aws-sdk-transfer 1.57.0 → 1.59.0

data/lib/aws-sdk-transfer/types.rb

@@ -42,15 +42,16 @@ module Aws::Transfer
     #       }
     #
     # @!attribute [rw] local_profile_id
-    #   A unique identifier for the AS2 process.
+    #   A unique identifier for the AS2 local profile.
     #   @return [String]
     #
     # @!attribute [rw] partner_profile_id
-    #   A unique identifier for the partner for the connector.
+    #   A unique identifier for the partner profile for the connector.
     #   @return [String]
     #
     # @!attribute [rw] message_subject
-    #   A short description to help identify the connector.
+    #   Used as the `Subject` HTTP header attribute in AS2 messages that are
+    #   being sent with the connector.
     #   @return [String]
     #
     # @!attribute [rw] compression
@@ -62,12 +63,17 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] signing_algorithm
-    #   The algorithm that is used to sign the AS2 transfers for this
-    #   partner profile.
+    #   The algorithm that is used to sign the AS2 messages sent with the
+    #   connector.
     #   @return [String]
     #
     # @!attribute [rw] mdn_signing_algorithm
     #   The signing algorithm for the MDN response.
+    #
+    #   <note markdown="1"> If set to DEFAULT (or not set at all), the value for
+    #   `SigningAlogorithm` is used.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] mdn_response
@@ -390,9 +396,18 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] access_role
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) role that grants access to at least the `HomeDirectory` of
-    #   your users' Amazon S3 buckets.
+    #   With AS2, you can send files by calling `StartFileTransfer` and
+    #   specifying the file paths in the request parameter, `SendFilePaths`.
+    #   We use the file’s parent directory (for example, for
+    #   `--send-file-paths /bucket/dir/file.txt`, parent directory is
+    #   `/bucket/dir/`) to temporarily store a processed AS2 message file,
+    #   store the MDN when we receive them from the partner, and write a
+    #   final JSON file containing relevant metadata of the transmission.
+    #   So, the `AccessRole` needs to provide read and write access to the
+    #   parent directory of the file location used in the
+    #   `StartFileTransfer` request. Additionally, you need to provide read
+    #   and write access to the parent directory of the files that you
+    #   intend to send with `StartFileTransfer`.
     #   @return [String]
     #
     # @!attribute [rw] status
@@ -534,12 +549,11 @@ module Aws::Transfer
     #       }
     #
     # @!attribute [rw] as_2_id
-    #   The `As2Id` is the *AS2-name*, as defined in the defined in the [RFC
-    #   4130][1]. For inbound transfers, this is the `AS2-From` header for
-    #   the AS2 messages sent from the partner. For outbound connectors,
-    #   this is the `AS2-To` header for the AS2 messages sent to the partner
-    #   using the `StartFileTransfer` API operation. This ID cannot include
-    #   spaces.
+    #   The `As2Id` is the *AS2-name*, as defined in the [RFC 4130][1]. For
+    #   inbound transfers, this is the `AS2-From` header for the AS2
+    #   messages sent from the partner. For outbound connectors, this is the
+    #   `AS2-To` header for the AS2 messages sent to the partner using the
+    #   `StartFileTransfer` API operation. This ID cannot include spaces.
     #
     #
     #
@@ -1426,6 +1440,32 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteHostKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         server_id: "ServerId", # required
+    #         host_key_id: "HostKeyId", # required
+    #       }
+    #
+    # @!attribute [rw] server_id
+    #   Provide the ID of the server that contains the host key that you are
+    #   deleting.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   The ID of the host key that you are deleting.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DeleteHostKeyRequest AWS API Documentation
+    #
+    class DeleteHostKeyRequest < Struct.new(
+      :server_id,
+      :host_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DeleteProfileRequest
     #   data as a hash:
     #
@@ -1783,6 +1823,44 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DescribeHostKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         server_id: "ServerId", # required
+    #         host_key_id: "HostKeyId", # required
+    #       }
+    #
+    # @!attribute [rw] server_id
+    #   Provide the ID of the server that contains the host key that you
+    #   want described.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   Provide the ID of the host key that you want described.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DescribeHostKeyRequest AWS API Documentation
+    #
+    class DescribeHostKeyRequest < Struct.new(
+      :server_id,
+      :host_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] host_key
+    #   Returns the details for the specified host key.
+    #   @return [Types::DescribedHostKey]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DescribeHostKeyResponse AWS API Documentation
+    #
+    class DescribeHostKeyResponse < Struct.new(
+      :host_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DescribeProfileRequest
     #   data as a hash:
     #
@@ -2081,11 +2159,11 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] local_profile_id
-    #   A unique identifier for the AS2 process.
+    #   A unique identifier for the AS2 local profile.
     #   @return [String]
     #
     # @!attribute [rw] partner_profile_id
-    #   A unique identifier for the partner in the agreement.
+    #   A unique identifier for the partner profile used in the agreement.
     #   @return [String]
     #
     # @!attribute [rw] base_directory
@@ -2094,9 +2172,18 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] access_role
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) role that grants access to at least the `HomeDirectory` of
-    #   your users' Amazon S3 buckets.
+    #   With AS2, you can send files by calling `StartFileTransfer` and
+    #   specifying the file paths in the request parameter, `SendFilePaths`.
+    #   We use the file’s parent directory (for example, for
+    #   `--send-file-paths /bucket/dir/file.txt`, parent directory is
+    #   `/bucket/dir/`) to temporarily store a processed AS2 message file,
+    #   store the MDN when we receive them from the partner, and write a
+    #   final JSON file containing relevant metadata of the transmission.
+    #   So, the `AccessRole` needs to provide read and write access to the
+    #   parent directory of the file location used in the
+    #   `StartFileTransfer` request. Additionally, you need to provide read
+    #   and write access to the parent directory of the files that you
+    #   intend to send with `StartFileTransfer`.
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -2327,6 +2414,62 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # The details for a server host key.
+    #
+    # @!attribute [rw] arn
+    #   The unique Amazon Resource Name (ARN) for the host key.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   A unique identifier for the host key.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_fingerprint
+    #   The public key fingerprint, which is a short sequence of bytes used
+    #   to identify the longer public key.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The text description for this host key.
+    #   @return [String]
+    #
+    # @!attribute [rw] type
+    #   The encryption algorithm used for the host key. The `Type` is one of
+    #   the following values:
+    #
+    #   * ssh-rsa
+    #
+    #   * ssh-ed25519
+    #
+    #   * ecdsa-sha2-nistp256
+    #
+    #   * ecdsa-sha2-nistp384
+    #
+    #   * ecdsa-sha2-nistp521
+    #   @return [String]
+    #
+    # @!attribute [rw] date_imported
+    #   The date on which the host key was added to the server.
+    #   @return [Time]
+    #
+    # @!attribute [rw] tags
+    #   Key-value pairs that can be used to group and search for host keys.
+    #   @return [Array<Types::Tag>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/DescribedHostKey AWS API Documentation
+    #
+    class DescribedHostKey < Struct.new(
+      :arn,
+      :host_key_id,
+      :host_key_fingerprint,
+      :description,
+      :type,
+      :date_imported,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The details for a local or partner AS2 profile. profile.
     #
     # @!attribute [rw] arn
@@ -2344,7 +2487,15 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] as_2_id
-    #   The unique identifier for the AS2 process.
+    #   The `As2Id` is the *AS2-name*, as defined in the [RFC 4130][1]. For
+    #   inbound transfers, this is the `AS2-From` header for the AS2
+    #   messages sent from the partner. For outbound connectors, this is the
+    #   `AS2-To` header for the AS2 messages sent to the partner using the
+    #   `StartFileTransfer` API operation. This ID cannot include spaces.
+    #
+    #
+    #
+    #   [1]: https://datatracker.ietf.org/doc/html/rfc4130
     #   @return [String]
     #
     # @!attribute [rw] certificate_ids
@@ -2437,9 +2588,27 @@ module Aws::Transfer
     # @!attribute [rw] protocol_details
     #   The protocol settings that are configured for your server.
     #
-    #   Use the `PassiveIp` parameter to indicate passive mode. Enter a
-    #   single IPv4 address, such as the public IP address of a firewall,
-    #   router, or load balancer.
+    #   * To indicate passive mode (for FTP and FTPS protocols), use the
+    #     `PassiveIp` parameter. Enter a single dotted-quad IPv4 address,
+    #     such as the external IP address of a firewall, router, or load
+    #     balancer.
+    #
+    #   * To ignore the error that is generated when the client attempts to
+    #     use the `SETSTAT` command on a file that you are uploading to an
+    #     Amazon S3 bucket, use the `SetStatOption` parameter. To have the
+    #     Transfer Family server ignore the `SETSTAT` command and upload
+    #     files without needing to make any changes to your SFTP client, set
+    #     the value to `ENABLE_NO_OP`. If you set the `SetStatOption`
+    #     parameter to `ENABLE_NO_OP`, Transfer Family generates a log entry
+    #     to Amazon CloudWatch Logs, so that you can determine when the
+    #     client is making a `SETSTAT` call.
+    #
+    #   * To determine whether your Transfer Family server resumes recent,
+    #     negotiated sessions through a unique session ID, use the
+    #     `TlsSessionResumptionMode` parameter.
+    #
+    #   * `As2Transports` indicates the transport method for the AS2
+    #     messages. Currently, only HTTP is supported.
     #   @return [Types::ProtocolDetails]
     #
     # @!attribute [rw] domain
@@ -2537,6 +2706,29 @@ module Aws::Transfer
     #     encryption
     #
     #   * `FTP` (File Transfer Protocol): Unencrypted file transfer
+    #
+    #   * `AS2` (Applicability Statement 2): used for transporting
+    #     structured business-to-business data
+    #
+    #   <note markdown="1"> * If you select `FTPS`, you must choose a certificate stored in
+    #     Certificate Manager (ACM) which is used to identify your server
+    #     when clients connect to it over FTPS.
+    #
+    #   * If `Protocol` includes either `FTP` or `FTPS`, then the
+    #     `EndpointType` must be `VPC` and the `IdentityProviderType` must
+    #     be `AWS_DIRECTORY_SERVICE` or `API_GATEWAY`.
+    #
+    #   * If `Protocol` includes `FTP`, then `AddressAllocationIds` cannot
+    #     be associated.
+    #
+    #   * If `Protocol` is set only to `SFTP`, the `EndpointType` can be set
+    #     to `PUBLIC` and the `IdentityProviderType` can be set to
+    #     `SERVICE_MANAGED`.
+    #
+    #   * If `Protocol` includes `AS2`, then the `EndpointType` must be
+    #     `VPC`, and domain must be Amazon S3.
+    #
+    #    </note>
     #   @return [Array<String>]
     #
     # @!attribute [rw] security_policy_name
@@ -3164,6 +3356,68 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ImportHostKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         server_id: "ServerId", # required
+    #         host_key_body: "HostKey", # required
+    #         description: "HostKeyDescription",
+    #         tags: [
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue", # required
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] server_id
+    #   Provide the ID of the server that contains the host key that you are
+    #   importing.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_body
+    #   The public key portion of an SSH key pair.
+    #
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Enter a text description to identify this host key.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   Key-value pairs that can be used to group and search for host keys.
+    #   @return [Array<Types::Tag>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ImportHostKeyRequest AWS API Documentation
+    #
+    class ImportHostKeyRequest < Struct.new(
+      :server_id,
+      :host_key_body,
+      :description,
+      :tags)
+      SENSITIVE = [:host_key_body]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] server_id
+    #   Returns the server ID that contains the imported key.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   Returns the host key ID for the imported key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ImportHostKeyResponse AWS API Documentation
+    #
+    class ImportHostKeyResponse < Struct.new(
+      :server_id,
+      :host_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass ImportSshPublicKeyRequest
     #   data as a hash:
     #
@@ -3594,6 +3848,64 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListHostKeysRequest
+    #   data as a hash:
+    #
+    #       {
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #         server_id: "ServerId", # required
+    #       }
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of host keys to return.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   When there are additional results that were not returned, a
+    #   `NextToken` parameter is returned. You can use that value for a
+    #   subsequent call to `ListHostKeys` to continue listing results.
+    #   @return [String]
+    #
+    # @!attribute [rw] server_id
+    #   Provide the ID of the server that contains the host keys that you
+    #   want to view.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ListHostKeysRequest AWS API Documentation
+    #
+    class ListHostKeysRequest < Struct.new(
+      :max_results,
+      :next_token,
+      :server_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_token
+    #   Returns a token that you can use to call `ListHostKeys` again and
+    #   receive additional results, if there are any.
+    #   @return [String]
+    #
+    # @!attribute [rw] server_id
+    #   Returns the server ID that contains the listed host keys.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_keys
+    #   Returns an array, where each item contains the details of a host
+    #   key.
+    #   @return [Array<Types::ListedHostKey>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ListHostKeysResponse AWS API Documentation
+    #
+    class ListHostKeysResponse < Struct.new(
+      :next_token,
+      :server_id,
+      :host_keys)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass ListProfilesRequest
     #   data as a hash:
     #
@@ -4006,11 +4318,11 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] local_profile_id
-    #   A unique identifier for the AS2 process.
+    #   A unique identifier for the AS2 local profile.
     #   @return [String]
     #
     # @!attribute [rw] partner_profile_id
-    #   A unique identifier for the partner process.
+    #   A unique identifier for the partner profile.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ListedAgreement AWS API Documentation
@@ -4142,6 +4454,58 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # Returns properties of the host key that is specified.
+    #
+    # @!attribute [rw] arn
+    #   Specifies the unique Amazon Resource Name (ARN) of the host key.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   @return [String]
+    #
+    # @!attribute [rw] fingerprint
+    #   The public key fingerprint, which is a short sequence of bytes used
+    #   to identify the longer public key.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The current description for the host key. You can change it by
+    #   calling the `UpdateHostKey` operation and providing a new
+    #   description.
+    #   @return [String]
+    #
+    # @!attribute [rw] type
+    #   The encryption algorithm used for the host key. The `Type` is one of
+    #   the following values:
+    #
+    #   * ssh-rsa
+    #
+    #   * ssh-ed25519
+    #
+    #   * ecdsa-sha2-nistp256
+    #
+    #   * ecdsa-sha2-nistp384
+    #
+    #   * ecdsa-sha2-nistp521
+    #   @return [String]
+    #
+    # @!attribute [rw] date_imported
+    #   The date on which the host key was added to the server.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ListedHostKey AWS API Documentation
+    #
+    class ListedHostKey < Struct.new(
+      :arn,
+      :host_key_id,
+      :fingerprint,
+      :description,
+      :type,
+      :date_imported)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Returns the properties of the profile that was specified.
     #
     # @!attribute [rw] arn
@@ -4153,7 +4517,15 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] as_2_id
-    #   The unique identifier for the AS2 process.
+    #   The `As2Id` is the *AS2-name*, as defined in the [RFC 4130][1]. For
+    #   inbound transfers, this is the `AS2-From` header for the AS2
+    #   messages sent from the partner. For outbound connectors, this is the
+    #   `AS2-To` header for the AS2 messages sent to the partner using the
+    #   `StartFileTransfer` API operation. This ID cannot include spaces.
+    #
+    #
+    #
+    #   [1]: https://datatracker.ietf.org/doc/html/rfc4130
     #   @return [String]
     #
     # @!attribute [rw] profile_type
@@ -5306,11 +5678,14 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] local_profile_id
+    #   A unique identifier for the AS2 local profile.
+    #
     #   To change the local profile identifier, provide a new value here.
     #   @return [String]
     #
     # @!attribute [rw] partner_profile_id
-    #   To change the partner profile identifier, provide a new value here.
+    #   A unique identifier for the partner profile. To change the partner
+    #   profile identifier, provide a new value here.
     #   @return [String]
     #
     # @!attribute [rw] base_directory
@@ -5320,9 +5695,18 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] access_role
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) role that grants access to at least the `HomeDirectory` of
-    #   your users' Amazon S3 buckets.
+    #   With AS2, you can send files by calling `StartFileTransfer` and
+    #   specifying the file paths in the request parameter, `SendFilePaths`.
+    #   We use the file’s parent directory (for example, for
+    #   `--send-file-paths /bucket/dir/file.txt`, parent directory is
+    #   `/bucket/dir/`) to temporarily store a processed AS2 message file,
+    #   store the MDN when we receive them from the partner, and write a
+    #   final JSON file containing relevant metadata of the transmission.
+    #   So, the `AccessRole` needs to provide read and write access to the
+    #   parent directory of the file location used in the
+    #   `StartFileTransfer` request. Additionally, you need to provide read
+    #   and write access to the parent directory of the files that you
+    #   intend to send with `StartFileTransfer`.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/UpdateAgreementRequest AWS API Documentation
@@ -5483,6 +5867,56 @@ module Aws::Transfer
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateHostKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         server_id: "ServerId", # required
+    #         host_key_id: "HostKeyId", # required
+    #         description: "HostKeyDescription", # required
+    #       }
+    #
+    # @!attribute [rw] server_id
+    #   Provide the ID of the server that contains the host key that you are
+    #   updating.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   Provide the ID of the host key that you are updating.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Provide an updated description for the host key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/UpdateHostKeyRequest AWS API Documentation
+    #
+    class UpdateHostKeyRequest < Struct.new(
+      :server_id,
+      :host_key_id,
+      :description)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] server_id
+    #   Returns the server ID for the server that contains the updated host
+    #   key.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_key_id
+    #   Returns the host key ID for the updated host key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/UpdateHostKeyResponse AWS API Documentation
+    #
+    class UpdateHostKeyResponse < Struct.new(
+      :server_id,
+      :host_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass UpdateProfileRequest
     #   data as a hash:
     #
@@ -5744,28 +6178,34 @@ module Aws::Transfer
     #   file transfer protocol client can connect to your server's
     #   endpoint. The available protocols are:
     #
-    #   * Secure Shell (SSH) File Transfer Protocol (SFTP): File transfer
+    #   * `SFTP` (Secure Shell (SSH) File Transfer Protocol): File transfer
     #     over SSH
     #
-    #   * File Transfer Protocol Secure (FTPS): File transfer with TLS
+    #   * `FTPS` (File Transfer Protocol Secure): File transfer with TLS
     #     encryption
     #
-    #   * File Transfer Protocol (FTP): Unencrypted file transfer
+    #   * `FTP` (File Transfer Protocol): Unencrypted file transfer
     #
-    #   <note markdown="1"> If you select `FTPS`, you must choose a certificate stored in Amazon
-    #   Web ServicesCertificate Manager (ACM) which will be used to identify
-    #   your server when clients connect to it over FTPS.
+    #   * `AS2` (Applicability Statement 2): used for transporting
+    #     structured business-to-business data
     #
-    #    If `Protocol` includes either `FTP` or `FTPS`, then the
-    #   `EndpointType` must be `VPC` and the `IdentityProviderType` must be
-    #   `AWS_DIRECTORY_SERVICE` or `API_GATEWAY`.
+    #   <note markdown="1"> * If you select `FTPS`, you must choose a certificate stored in
+    #     Certificate Manager (ACM) which is used to identify your server
+    #     when clients connect to it over FTPS.
     #
-    #    If `Protocol` includes `FTP`, then `AddressAllocationIds` cannot be
-    #   associated.
+    #   * If `Protocol` includes either `FTP` or `FTPS`, then the
+    #     `EndpointType` must be `VPC` and the `IdentityProviderType` must
+    #     be `AWS_DIRECTORY_SERVICE` or `API_GATEWAY`.
+    #
+    #   * If `Protocol` includes `FTP`, then `AddressAllocationIds` cannot
+    #     be associated.
+    #
+    #   * If `Protocol` is set only to `SFTP`, the `EndpointType` can be set
+    #     to `PUBLIC` and the `IdentityProviderType` can be set to
+    #     `SERVICE_MANAGED`.
     #
-    #    If `Protocol` is set only to `SFTP`, the `EndpointType` can be set
-    #   to `PUBLIC` and the `IdentityProviderType` can be set to
-    #   `SERVICE_MANAGED`.
+    #   * If `Protocol` includes `AS2`, then the `EndpointType` must be
+    #     `VPC`, and domain must be Amazon S3.
     #
     #    </note>
     #   @return [Array<String>]