aws-sdk-transfer 1.55.0 → 1.56.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62b5d0ac159e15bf5798644c697ad294c6f80b8acd1646184ffc4d8e59348674
-  data.tar.gz: be3190d2ad62cf50d55bd2323e1ce6c0d85e6d7b6f2252d04cb00451d9162d64
+  metadata.gz: 39c99769c059939e06165d2c2ed8b711c36c9f5e08f7ada74706ee5ba41b0e1f
+  data.tar.gz: efce29b73f50cba763087e845db52b789c60ef897cd2bb6b3a43d2f84feada21
 SHA512:
-  metadata.gz: ebb9965f55002d391809c579488c79896b624d3f7452d48ac1970d424c32f0b6ac150fb75339a734a6553f04f96cb75b9c6c339630b9639f75a8da90d2a8ce1d
-  data.tar.gz: ccfd528219dcf37f60f0dd5181a4fb80fa115a5405fc91b1fce2c09fdc1bfbf0dcdb5a945196d01ddcd056ef5a8e26ea6237e498c51322ac1b3f868dfc70e5ea
+  metadata.gz: 59ccd768fb291d1faf960b6a63230fa63f7170e4210e00dc68cb515763456e6c3d08ca10275829994c6a220ba87dd691a83f46b81480096ee9c98d69c7dd6e38
+  data.tar.gz: b4712eea79a68f04c9fa1b0553dd28652a31d29b4103f5f1bce7e3eceef2d15da68b8c1fc96a43519545e4ca1f49667d52ed2291a4609d12de8c6931ae312e46

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.56.0 (2022-06-22)
+------------------
+
+* Feature - Until today, the service supported only RSA host keys and user keys. Now with this launch, Transfer Family has expanded the support for ECDSA and ED25519 host keys and user keys, enabling customers to support a broader set of clients by choosing RSA, ECDSA, and ED25519 host and user keys.
+
 1.55.0 (2022-05-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.55.0
+1.56.0

data/lib/aws-sdk-transfer/client.rb

@@ -608,8 +608,30 @@ module Aws::Transfer
     #    </note>
     #
     # @option params [String] :host_key
-    #   The RSA private key as generated by the `ssh-keygen -N "" -m PEM -f
-    #   my-new-server-key` command.
+    #   The RSA, ECDSA, or ED25519 private key to use for your server.
+    #
+    #   Use the following command to generate an RSA 2048 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Use a minimum value of 2048 for the `-b` option: you can create a
+    #   stronger key using 3072 or 4096.
+    #
+    #   Use the following command to generate an ECDSA 256 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Valid values for the `-b` option for ECDSA are 256, 384, and 521.
+    #
+    #   Use the following command to generate an ED25519 key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ed25519 -N "" -f my-new-server-key`.
+    #
+    #   For all of these commands, you can replace *my-new-server-key* with a
+    #   string of your choice.
     #
     #   If you aren't planning to migrate existing users from an existing
     #   SFTP-enabled server to a new server, don't update the host key.
@@ -900,10 +922,7 @@ module Aws::Transfer
     #   The public portion of the Secure Shell (SSH) key used to authenticate
     #   the user to the server.
     #
-    #   <note markdown="1"> Currently, Transfer Family does not accept elliptical curve keys (keys
-    #   beginning with `ecdsa`).
-    #
-    #    </note>
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
     #
     # @option params [Array<Types::Tag>] :tags
     #   Key-value pairs that can be used to group and search for users. Tags
@@ -1670,6 +1689,8 @@ module Aws::Transfer
     # @option params [required, String] :ssh_public_key_body
     #   The public key portion of an SSH key pair.
     #
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
+    #
     # @option params [required, String] :user_name
     #   The name of the user account that is assigned to one or more servers.
     #
@@ -2582,15 +2603,37 @@ module Aws::Transfer
     #    </note>
     #
     # @option params [String] :host_key
-    #   The RSA private key as generated by `ssh-keygen -N "" -m PEM -f
-    #   my-new-server-key`.
+    #   The RSA, ECDSA, or ED25519 private key to use for your server.
+    #
+    #   Use the following command to generate an RSA 2048 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Use a minimum value of 2048 for the `-b` option: you can create a
+    #   stronger key using 3072 or 4096.
+    #
+    #   Use the following command to generate an ECDSA 256 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Valid values for the `-b` option for ECDSA are 256, 384, and 521.
+    #
+    #   Use the following command to generate an ED25519 key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ed25519 -N "" -f my-new-server-key`.
+    #
+    #   For all of these commands, you can replace *my-new-server-key* with a
+    #   string of your choice.
     #
     #   If you aren't planning to migrate existing users from an existing
-    #   server to a new server, don't update the host key. Accidentally
-    #   changing a server's host key can be disruptive.
+    #   SFTP-enabled server to a new server, don't update the host key.
+    #   Accidentally changing a server's host key can be disruptive.
     #
     #   For more information, see [Change the host key for your SFTP-enabled
-    #   server][1] in the *Amazon Web ServicesTransfer Family User Guide*.
+    #   server][1] in the *Amazon Web Services Transfer Family User Guide*.
     #
     #
     #
@@ -2887,7 +2930,7 @@ module Aws::Transfer
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-transfer'
-      context[:gem_version] = '1.55.0'
+      context[:gem_version] = '1.56.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-transfer/types.rb

@@ -410,8 +410,30 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] host_key
-    #   The RSA private key as generated by the `ssh-keygen -N "" -m PEM -f
-    #   my-new-server-key` command.
+    #   The RSA, ECDSA, or ED25519 private key to use for your server.
+    #
+    #   Use the following command to generate an RSA 2048 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Use a minimum value of 2048 for the `-b` option: you can create a
+    #   stronger key using 3072 or 4096.
+    #
+    #   Use the following command to generate an ECDSA 256 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Valid values for the `-b` option for ECDSA are 256, 384, and 521.
+    #
+    #   Use the following command to generate an ED25519 key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ed25519 -N "" -f my-new-server-key`.
+    #
+    #   For all of these commands, you can replace *my-new-server-key* with
+    #   a string of your choice.
     #
     #   If you aren't planning to migrate existing users from an existing
     #   SFTP-enabled server to a new server, don't update the host key.
@@ -717,10 +739,7 @@ module Aws::Transfer
     #   The public portion of the Secure Shell (SSH) key used to
     #   authenticate the user to the server.
     #
-    #   <note markdown="1"> Currently, Transfer Family does not accept elliptical curve keys
-    #   (keys beginning with `ecdsa`).
-    #
-    #    </note>
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -1627,8 +1646,8 @@ module Aws::Transfer
     #   The protocol settings that are configured for your server.
     #
     #   Use the `PassiveIp` parameter to indicate passive mode. Enter a
-    #   single dotted-quad IPv4 address, such as the external IP address of
-    #   a firewall, router, or load balancer.
+    #   single IPv4 address, such as the public IP address of a firewall,
+    #   router, or load balancer.
     #   @return [Types::ProtocolDetails]
     #
     # @!attribute [rw] domain
@@ -2284,6 +2303,8 @@ module Aws::Transfer
     #
     # @!attribute [rw] ssh_public_key_body
     #   The public key portion of an SSH key pair.
+    #
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
     #   @return [String]
     #
     # @!attribute [rw] user_name
@@ -3172,8 +3193,8 @@ module Aws::Transfer
     #
     # @!attribute [rw] passive_ip
     #   Indicates passive mode, for FTP and FTPS protocols. Enter a single
-    #   dotted-quad IPv4 address, such as the external IP address of a
-    #   firewall, router, or load balancer. For example:
+    #   IPv4 address, such as the public IP address of a firewall, router,
+    #   or load balancer. For example:
     #
     #   ` aws transfer update-server --protocol-details PassiveIp=0.0.0.0 `
     #
@@ -3181,10 +3202,10 @@ module Aws::Transfer
     #   you want to use.
     #
     #   <note markdown="1"> If you change the `PassiveIp` value, you must stop and then restart
-    #   your Transfer server for the change to take effect. For details on
-    #   using Passive IP (PASV) in a NAT environment, see [Configuring your
-    #   FTPS server behind a firewall or NAT with Amazon Web Services
-    #   Transfer Family][1].
+    #   your Transfer Family server for the change to take effect. For
+    #   details on using passive mode (PASV) in a NAT environment, see
+    #   [Configuring your FTPS server behind a firewall or NAT with Transfer
+    #   Family][1].
     #
     #    </note>
     #
@@ -3194,14 +3215,15 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] tls_session_resumption_mode
-    #   A property used with Transfer servers that use the FTPS protocol.
-    #   TLS Session Resumption provides a mechanism to resume or share a
-    #   negotiated secret key between the control and data connection for an
-    #   FTPS session. `TlsSessionResumptionMode` determines whether or not
-    #   the server resumes recent, negotiated sessions through a unique
-    #   session ID. This property is available during `CreateServer` and
-    #   `UpdateServer` calls. If a `TlsSessionResumptionMode` value is not
-    #   specified during CreateServer, it is set to `ENFORCED` by default.
+    #   A property used with Transfer Family servers that use the FTPS
+    #   protocol. TLS Session Resumption provides a mechanism to resume or
+    #   share a negotiated secret key between the control and data
+    #   connection for an FTPS session. `TlsSessionResumptionMode`
+    #   determines whether or not the server resumes recent, negotiated
+    #   sessions through a unique session ID. This property is available
+    #   during `CreateServer` and `UpdateServer` calls. If a
+    #   `TlsSessionResumptionMode` value is not specified during
+    #   `CreateServer`, it is set to `ENFORCED` by default.
     #
     #   * `DISABLED`\: the server does not process TLS session resumption
     #     client requests and creates a new TLS session for each request.
@@ -3228,26 +3250,26 @@ module Aws::Transfer
     #
     # @!attribute [rw] set_stat_option
     #   Use the `SetStatOption` to ignore the error that is generated when
-    #   the client attempts to use SETSTAT on a file you are uploading to an
-    #   S3 bucket.
+    #   the client attempts to use `SETSTAT` on a file you are uploading to
+    #   an S3 bucket.
     #
     #   Some SFTP file transfer clients can attempt to change the attributes
     #   of remote files, including timestamp and permissions, using
-    #   commands, such as SETSTAT when uploading the file. However, these
+    #   commands, such as `SETSTAT` when uploading the file. However, these
     #   commands are not compatible with object storage systems, such as
     #   Amazon S3. Due to this incompatibility, file uploads from these
     #   clients can result in errors even when the file is otherwise
     #   successfully uploaded.
     #
     #   Set the value to `ENABLE_NO_OP` to have the Transfer Family server
-    #   ignore the SETSTAT command, and upload files without needing to make
-    #   any changes to your SFTP client. While the `SetStatOption`
+    #   ignore the `SETSTAT` command, and upload files without needing to
+    #   make any changes to your SFTP client. While the `SetStatOption`
     #   `ENABLE_NO_OP` setting ignores the error, it does generate a log
-    #   entry in CloudWatch Logs, so you can determine when the client is
-    #   making a SETSTAT call.
+    #   entry in Amazon CloudWatch Logs, so you can determine when the
+    #   client is making a `SETSTAT` call.
     #
     #   <note markdown="1"> If you want to preserve the original timestamp for your file, and
-    #   modify other file attributes using SETSTAT, you can use Amazon EFS
+    #   modify other file attributes using `SETSTAT`, you can use Amazon EFS
     #   as backend storage with Transfer Family.
     #
     #    </note>
@@ -3496,6 +3518,8 @@ module Aws::Transfer
     # @!attribute [rw] ssh_public_key_body
     #   Specifies the content of the SSH public key as specified by the
     #   `PublicKeyId`.
+    #
+    #   Transfer Family accepts RSA, ECDSA, and ED25519 keys.
     #   @return [String]
     #
     # @!attribute [rw] ssh_public_key_id
@@ -3753,8 +3777,6 @@ module Aws::Transfer
 
     # The request was denied due to request throttling.
     #
-    # HTTP Status Code: 400
-    #
     # @!attribute [rw] retry_after_seconds
     #   @return [String]
     #
@@ -4111,15 +4133,37 @@ module Aws::Transfer
     #   @return [String]
     #
     # @!attribute [rw] host_key
-    #   The RSA private key as generated by `ssh-keygen -N "" -m PEM -f
-    #   my-new-server-key`.
+    #   The RSA, ECDSA, or ED25519 private key to use for your server.
+    #
+    #   Use the following command to generate an RSA 2048 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Use a minimum value of 2048 for the `-b` option: you can create a
+    #   stronger key using 3072 or 4096.
+    #
+    #   Use the following command to generate an ECDSA 256 bit key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key`.
+    #
+    #   Valid values for the `-b` option for ECDSA are 256, 384, and 521.
+    #
+    #   Use the following command to generate an ED25519 key with no
+    #   passphrase:
+    #
+    #   `ssh-keygen -t ed25519 -N "" -f my-new-server-key`.
+    #
+    #   For all of these commands, you can replace *my-new-server-key* with
+    #   a string of your choice.
     #
     #   If you aren't planning to migrate existing users from an existing
-    #   server to a new server, don't update the host key. Accidentally
-    #   changing a server's host key can be disruptive.
+    #   SFTP-enabled server to a new server, don't update the host key.
+    #   Accidentally changing a server's host key can be disruptive.
     #
     #   For more information, see [Change the host key for your SFTP-enabled
-    #   server][1] in the *Amazon Web ServicesTransfer Family User Guide*.
+    #   server][1] in the *Amazon Web Services Transfer Family User Guide*.
     #
     #
     #

data/lib/aws-sdk-transfer.rb

@@ -49,6 +49,6 @@ require_relative 'aws-sdk-transfer/customizations'
 # @!group service
 module Aws::Transfer
 
-  GEM_VERSION = '1.55.0'
+  GEM_VERSION = '1.56.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-transfer
 version: !ruby/object:Gem::Version
-  version: 1.55.0
+  version: 1.56.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-18 00:00:00.000000000 Z
+date: 2022-06-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core