aws-sdk-transfer 1.145.0 → 1.146.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e1bb6c2892600ee08f4c21f9bd8171ceb1a066b15ec4a4fd7eee664eae2605ae
-  data.tar.gz: 02263343d75464e86711741a178ab40551eb920b45ba8c230359ccb80491a09c
+  metadata.gz: 0ba2122544e8d5692d74be6edd3d2c1149e250d9edd3b5a776876ae575925d1e
+  data.tar.gz: ec351a563779bb118038714ab3409cdee6653f5f5575e8c1a2a50d7be5d5ebb4
 SHA512:
-  metadata.gz: 36a9f8b2cb9ba792deafb3541bef2cd27151a85eac4eaf7be60fbc30a1f9c4e36f88353191bce8fec678efbfe7f333f12ea7e1de1ca7213762e2a511193557ef
-  data.tar.gz: 9f4413e7d9fe8271df7bf8ccd0bdc5ed872faa098e678e8c64d156ca5138bfa2e085af2e0f87471bdc76471f5e7352eaeda5ab15e5b2c3af8187b5952c2d5cc4
+  metadata.gz: 44b030b474ee2aaffd926cc978a3d21449269be1337edd9dceffa7d7909166abc169a9ca81164870ca6ff998297e2d33d3498a7859362f2ccec2e58903785e30
+  data.tar.gz: 89c1207925a726583458e2b7ee787907ceae8781b72a902fb69aa6896b5e86f3040620cde885b4b81fcf0ab5df707368e47664856c8cc0b084f6446cad3dad37

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.146.0 (2026-09-15)
+------------------
+
+* Feature - AWS Transfer Family now preserves the original source IP address using Proxy Protocol v2 when you place a Network Load Balancer in front of your server for SFTP connections.
+
 1.145.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.145.0
+1.146.0

data/lib/aws-sdk-transfer/client.rb

@@ -1385,6 +1385,9 @@ module Aws::Transfer
     #       tls_session_resumption_mode: "DISABLED", # accepts DISABLED, ENABLED, ENFORCED
     #       set_stat_option: "DEFAULT", # accepts DEFAULT, ENABLE_NO_OP
     #       as_2_transports: ["HTTP"], # accepts HTTP
+    #       proxy_config: {
+    #         sftp_mode: "NONE", # accepts NONE, PROXY_PROTOCOL_V2_ENFORCED
+    #       },
     #     },
     #     security_policy_name: "SecurityPolicyName",
     #     tags: [
@@ -2694,6 +2697,7 @@ module Aws::Transfer
     #   resp.server.protocol_details.set_stat_option #=> String, one of "DEFAULT", "ENABLE_NO_OP"
     #   resp.server.protocol_details.as_2_transports #=> Array
     #   resp.server.protocol_details.as_2_transports[0] #=> String, one of "HTTP"
+    #   resp.server.protocol_details.proxy_config.sftp_mode #=> String, one of "NONE", "PROXY_PROTOCOL_V2_ENFORCED"
     #   resp.server.domain #=> String, one of "S3", "EFS"
     #   resp.server.endpoint_details.address_allocation_ids #=> Array
     #   resp.server.endpoint_details.address_allocation_ids[0] #=> String
@@ -5413,6 +5417,9 @@ module Aws::Transfer
     #       tls_session_resumption_mode: "DISABLED", # accepts DISABLED, ENABLED, ENFORCED
     #       set_stat_option: "DEFAULT", # accepts DEFAULT, ENABLE_NO_OP
     #       as_2_transports: ["HTTP"], # accepts HTTP
+    #       proxy_config: {
+    #         sftp_mode: "NONE", # accepts NONE, PROXY_PROTOCOL_V2_ENFORCED
+    #       },
     #     },
     #     endpoint_details: {
     #       address_allocation_ids: ["AddressAllocationId"],
@@ -5773,7 +5780,7 @@ module Aws::Transfer
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-transfer'
-      context[:gem_version] = '1.145.0'
+      context[:gem_version] = '1.146.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-transfer/client_api.rb

@@ -273,6 +273,8 @@ module Aws::Transfer
     Protocol = Shapes::StringShape.new(name: 'Protocol')
     ProtocolDetails = Shapes::StructureShape.new(name: 'ProtocolDetails')
     Protocols = Shapes::ListShape.new(name: 'Protocols')
+    ProxyConfig = Shapes::StructureShape.new(name: 'ProxyConfig')
+    ProxyMode = Shapes::StringShape.new(name: 'ProxyMode')
     Resource = Shapes::StringShape.new(name: 'Resource')
     ResourceExistsException = Shapes::StructureShape.new(name: 'ResourceExistsException')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
@@ -1276,10 +1278,14 @@ module Aws::Transfer
     ProtocolDetails.add_member(:tls_session_resumption_mode, Shapes::ShapeRef.new(shape: TlsSessionResumptionMode, location_name: "TlsSessionResumptionMode"))
     ProtocolDetails.add_member(:set_stat_option, Shapes::ShapeRef.new(shape: SetStatOption, location_name: "SetStatOption"))
     ProtocolDetails.add_member(:as_2_transports, Shapes::ShapeRef.new(shape: As2Transports, location_name: "As2Transports"))
+    ProtocolDetails.add_member(:proxy_config, Shapes::ShapeRef.new(shape: ProxyConfig, location_name: "ProxyConfig"))
     ProtocolDetails.struct_class = Types::ProtocolDetails
 
     Protocols.member = Shapes::ShapeRef.new(shape: Protocol)
 
+    ProxyConfig.add_member(:sftp_mode, Shapes::ShapeRef.new(shape: ProxyMode, location_name: "SftpMode"))
+    ProxyConfig.struct_class = Types::ProxyConfig
+
     ResourceExistsException.add_member(:message, Shapes::ShapeRef.new(shape: Message, required: true, location_name: "Message"))
     ResourceExistsException.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
     ResourceExistsException.add_member(:resource_type, Shapes::ShapeRef.new(shape: ResourceType, required: true, location_name: "ResourceType"))

data/lib/aws-sdk-transfer/types.rb

@@ -5873,13 +5873,75 @@ module Aws::Transfer
     #   HTTP is supported.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] proxy_config
+    #   The configuration for PROXY protocol version 2 (PPv2) support on the
+    #   Transfer Family server. For more information, see [Working with
+    #   Network Load Balancers][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/transfer/latest/userguide/working-with-nlb.html
+    #   @return [Types::ProxyConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ProtocolDetails AWS API Documentation
     #
     class ProtocolDetails < Struct.new(
       :passive_ip,
       :tls_session_resumption_mode,
       :set_stat_option,
-      :as_2_transports)
+      :as_2_transports,
+      :proxy_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains configuration for PROXY protocol version 2 (PPv2) support on
+    # an Transfer Family server. When enabled, Transfer Family reads the
+    # added PPv2 header from incoming connections to extract the original
+    # client IP address. This address is then available in Amazon CloudWatch
+    # Logs entries and is passed to custom identity providers during
+    # authentication, enabling IP-based access policies. For more
+    # information, see [Working with Network Load Balancers][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/transfer/latest/userguide/working-with-nlb.html
+    #
+    # @!attribute [rw] sftp_mode
+    #   Specifies whether the Transfer Family server requires or ignores a
+    #   PPv2 header containing the original client IP address on incoming
+    #   SFTP connections. If you don't specify a value, the default is
+    #   `NONE`
+    #
+    #   * `NONE`: the server reads and ignores any PPv2 header on incoming
+    #     SFTP connections. This is the default value. Use this value when
+    #     your SFTP server is not behind an NLB, or when you do not need to
+    #     preserve client source IP addresses through an NLB.
+    #
+    #   * `PROXY_PROTOCOL_V2_ENFORCED`: the server requires a valid PPv2
+    #     header on every incoming SFTP connection. When a valid header is
+    #     present, the server applies it and uses the client IP address from
+    #     the header. If a connection arrives without a PPv2 header, the
+    #     server refuses the connection and logs an error to Amazon
+    #     CloudWatch Logs indicating that the expected PPv2 header was
+    #     missing. Use this value when your SFTP server is behind an NLB
+    #     with PPv2 enabled on the target group.
+    #
+    #     When you enable `PROXY_PROTOCOL_V2_ENFORCED`, the server trusts
+    #     the source IP address in the PPv2 header. You must configure
+    #     security groups on your server's VPC endpoint to restrict inbound
+    #     traffic to only the NLB's private IP addresses. For the full
+    #     requirements, see [Working with Network Load Balancers][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/transfer/latest/userguide/working-with-nlb.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/ProxyConfig AWS API Documentation
+    #
+    class ProxyConfig < Struct.new(
+      :sftp_mode)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-transfer.rb

@@ -55,7 +55,7 @@ module Aws::Transfer
   autoload :EndpointProvider, 'aws-sdk-transfer/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-transfer/endpoints'
 
-  GEM_VERSION = '1.145.0'
+  GEM_VERSION = '1.146.0'
 
 end
 

data/sig/client.rbs

@@ -218,12 +218,7 @@ module Aws
                            ?post_authentication_login_banner: ::String,
                            ?pre_authentication_login_banner: ::String,
                            ?protocols: Array[("SFTP" | "FTP" | "FTPS" | "AS2")],
-                           ?protocol_details: {
-                             passive_ip: ::String?,
-                             tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")?,
-                             set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")?,
-                             as_2_transports: Array[("HTTP")]?
-                           },
+                           ?protocol_details: Params::protocol_details,
                            ?security_policy_name: ::String,
                            ?tags: Array[
                              {
@@ -1040,12 +1035,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Transfer/Client.html#update_server-instance_method
       def update_server: (
                            ?certificate: ::String,
-                           ?protocol_details: {
-                             passive_ip: ::String?,
-                             tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")?,
-                             set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")?,
-                             as_2_transports: Array[("HTTP")]?
-                           },
+                           ?protocol_details: Params::protocol_details,
                            ?endpoint_details: {
                              address_allocation_ids: Array[::String]?,
                              subnet_ids: Array[::String]?,

data/sig/params.rbs

@@ -25,6 +25,16 @@ module Aws
       }?
     }
 
+      type protocol_details = {
+      passive_ip: ::String?,
+      tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")?,
+      set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")?,
+      as_2_transports: Array[("HTTP")]?,
+      proxy_config: {
+        sftp_mode: ("NONE" | "PROXY_PROTOCOL_V2_ENFORCED")?
+      }?
+    }
+
       type workflow_details = {
       on_upload: Array[
         {

data/sig/types.rbs

@@ -1126,6 +1126,12 @@ module Aws::Transfer
       attr_accessor tls_session_resumption_mode: ("DISABLED" | "ENABLED" | "ENFORCED")
       attr_accessor set_stat_option: ("DEFAULT" | "ENABLE_NO_OP")
       attr_accessor as_2_transports: ::Array[("HTTP")]
+      attr_accessor proxy_config: Types::ProxyConfig
+      SENSITIVE: []
+    end
+
+    class ProxyConfig
+      attr_accessor sftp_mode: ("NONE" | "PROXY_PROTOCOL_V2_ENFORCED")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-transfer
 version: !ruby/object:Gem::Version
-  version: 1.145.0
+  version: 1.146.0
 platform: ruby
 authors:
 - Amazon Web Services