aws-sdk-transfer 1.88.0 → 1.89.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dd44a4b53e27bf567a03377b6a58f62f29ded41ff6d6bdf1f3a1a4805a2cf16c
-  data.tar.gz: 97729ca4b80de16e8f7a8e4654f6ad71f14d965d11d7767e0283ac1cf919ce46
+  metadata.gz: 5bdaa099422c988869d76c6e047a5c72546c56e60e50b80e851470eb09ccabe4
+  data.tar.gz: f35dbf8c8a526a808703fc2b737f6c09c6e7e3280939417911f4acb2444d7812
 SHA512:
-  metadata.gz: c9462b63e6130a34bf92b6f7471b279a2ae9b0086c02ebef0ed39c4a3582f4baab0785394a44f92a04c71ec851ab0c84fe8e7ba648132d1dc0d7fb0a2988abde
-  data.tar.gz: 926bfa3897a7c39f19bc01bc12994eb067b95919b505fd04b148c4e5a31ff36a79732d1baf9b973c765b9a9e53b81f5ae7f630a3cf6c4eab6e91d77067763e3d
+  metadata.gz: 730a4cece8bea004ae23f4a3502c848ca05ea1270d39b3f790f94d1da5a21632ab44eb5a716d86aa4e8aeaee4f62fa8f552ff859a03c47a9d07ce61e53a608ba
+  data.tar.gz: 17015546646ded64c5e65cbf8cd47134603cbf404eef742d85e02b593081745051fbec723b130ab08bcf3ad1819a4d54df4a9ba1af63e535ad5598f921d9bb7b

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.89.0 (2024-03-08)
+------------------
+
+* Feature - Added DES_EDE3_CBC to the list of supported encryption algorithms for messages sent with an AS2 connector.
+
 1.88.0 (2024-01-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.88.0
+1.89.0

data/lib/aws-sdk-transfer/client.rb

@@ -678,7 +678,7 @@ module Aws::Transfer
     # sending files to an externally hosted AS2 server. For SFTP, the
     # connector is required when sending files to an SFTP server or
     # receiving files from an SFTP server. For more details about
-    # connectors, see [Create AS2 connectors][1] and [Create SFTP
+    # connectors, see [Configure AS2 connectors][1] and [Create SFTP
     # connectors][2].
     #
     # <note markdown="1"> You must specify exactly one configuration object: either for AS2
@@ -688,7 +688,7 @@ module Aws::Transfer
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/transfer/latest/userguide/create-b2b-server.html#configure-as2-connector
+    # [1]: https://docs.aws.amazon.com/transfer/latest/userguide/configure-as2-connector.html
     # [2]: https://docs.aws.amazon.com/transfer/latest/userguide/configure-sftp-connector.html
     #
     # @option params [required, String] :url
@@ -757,7 +757,7 @@ module Aws::Transfer
     #       partner_profile_id: "ProfileId",
     #       message_subject: "MessageSubject",
     #       compression: "ZLIB", # accepts ZLIB, DISABLED
-    #       encryption_algorithm: "AES128_CBC", # accepts AES128_CBC, AES192_CBC, AES256_CBC, NONE
+    #       encryption_algorithm: "AES128_CBC", # accepts AES128_CBC, AES192_CBC, AES256_CBC, DES_EDE3_CBC, NONE
     #       signing_algorithm: "SHA256", # accepts SHA256, SHA384, SHA512, SHA1, NONE
     #       mdn_signing_algorithm: "SHA256", # accepts SHA256, SHA384, SHA512, SHA1, NONE, DEFAULT
     #       mdn_response: "SYNC", # accepts SYNC, NONE
@@ -2054,7 +2054,7 @@ module Aws::Transfer
     #   resp.connector.as_2_config.partner_profile_id #=> String
     #   resp.connector.as_2_config.message_subject #=> String
     #   resp.connector.as_2_config.compression #=> String, one of "ZLIB", "DISABLED"
-    #   resp.connector.as_2_config.encryption_algorithm #=> String, one of "AES128_CBC", "AES192_CBC", "AES256_CBC", "NONE"
+    #   resp.connector.as_2_config.encryption_algorithm #=> String, one of "AES128_CBC", "AES192_CBC", "AES256_CBC", "DES_EDE3_CBC", "NONE"
     #   resp.connector.as_2_config.signing_algorithm #=> String, one of "SHA256", "SHA384", "SHA512", "SHA1", "NONE"
     #   resp.connector.as_2_config.mdn_signing_algorithm #=> String, one of "SHA256", "SHA384", "SHA512", "SHA1", "NONE", "DEFAULT"
     #   resp.connector.as_2_config.mdn_response #=> String, one of "SYNC", "NONE"
@@ -4060,7 +4060,7 @@ module Aws::Transfer
     #       partner_profile_id: "ProfileId",
     #       message_subject: "MessageSubject",
     #       compression: "ZLIB", # accepts ZLIB, DISABLED
-    #       encryption_algorithm: "AES128_CBC", # accepts AES128_CBC, AES192_CBC, AES256_CBC, NONE
+    #       encryption_algorithm: "AES128_CBC", # accepts AES128_CBC, AES192_CBC, AES256_CBC, DES_EDE3_CBC, NONE
     #       signing_algorithm: "SHA256", # accepts SHA256, SHA384, SHA512, SHA1, NONE
     #       mdn_signing_algorithm: "SHA256", # accepts SHA256, SHA384, SHA512, SHA1, NONE, DEFAULT
     #       mdn_response: "SYNC", # accepts SYNC, NONE
@@ -4500,6 +4500,21 @@ module Aws::Transfer
     # The response returns the `ServerId` and the `UserName` for the updated
     # user.
     #
+    # In the console, you can select *Restricted* when you create or update
+    # a user. This ensures that the user can't access anything outside of
+    # their home directory. The programmatic way to configure this behavior
+    # is to update the user. Set their `HomeDirectoryType` to `LOGICAL`, and
+    # specify `HomeDirectoryMappings` with `Entry` as root (`/`) and
+    # `Target` as their home directory.
+    #
+    # For example, if the user's home directory is `/test/admin-user`, the
+    # following command updates the user so that their configuration in the
+    # console shows the *Restricted* flag as selected.
+    #
+    # ` aws transfer update-user --server-id <server-id> --user-name
+    # admin-user --home-directory-type LOGICAL --home-directory-mappings
+    # "[\{"Entry":"/", "Target":"/test/admin-user"\}]"`
+    #
     # @option params [String] :home_directory
     #   The landing directory (folder) for a user when they log in to the
     #   server using the client.
@@ -4665,7 +4680,7 @@ module Aws::Transfer
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-transfer'
-      context[:gem_version] = '1.88.0'
+      context[:gem_version] = '1.89.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-transfer/types.rb

@@ -47,10 +47,14 @@ module Aws::Transfer
     # @!attribute [rw] encryption_algorithm
     #   The algorithm that is used to encrypt the file.
     #
-    #   <note markdown="1"> You can only specify `NONE` if the URL for your connector uses
-    #   HTTPS. This ensures that no traffic is sent in clear text.
+    #   Note the following:
     #
-    #    </note>
+    #   * Do not use the `DES_EDE3_CBC` algorithm unless you must support a
+    #     legacy client that requires it, as it is a weak encryption
+    #     algorithm.
+    #
+    #   * You can only specify `NONE` if the URL for your connector uses
+    #     HTTPS. Using HTTPS ensures that no traffic is sent in clear text.
     #   @return [String]
     #
     # @!attribute [rw] signing_algorithm
@@ -2924,10 +2928,41 @@ module Aws::Transfer
     #   A list of address allocation IDs that are required to attach an
     #   Elastic IP address to your server's endpoint.
     #
-    #   <note markdown="1"> This property can only be set when `EndpointType` is set to `VPC`
-    #   and it is only valid in the `UpdateServer` API.
+    #   An address allocation ID corresponds to the allocation ID of an
+    #   Elastic IP address. This value can be retrieved from the
+    #   `allocationId` field from the Amazon EC2 [Address][1] data type. One
+    #   way to retrieve this value is by calling the EC2
+    #   [DescribeAddresses][2] API.
+    #
+    #   This parameter is optional. Set this parameter if you want to make
+    #   your VPC endpoint public-facing. For details, see [Create an
+    #   internet-facing endpoint for your server][3].
+    #
+    #   <note markdown="1"> This property can only be set as follows:
+    #
+    #    * `EndpointType` must be set to `VPC`
+    #
+    #   * The Transfer Family server must be offline.
+    #
+    #   * You cannot set this parameter for Transfer Family servers that use
+    #     the FTP protocol.
+    #
+    #   * The server must already have `SubnetIds` populated (`SubnetIds`
+    #     and `AddressAllocationIds` cannot be updated simultaneously).
+    #
+    #   * `AddressAllocationIds` can't contain duplicates, and must be
+    #     equal in length to `SubnetIds`. For example, if you have three
+    #     subnet IDs, you must also specify three address allocation IDs.
+    #
+    #   * Call the `UpdateServer` API to set or change this parameter.
     #
     #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Address.html
+    #   [2]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAddresses.html
+    #   [3]: https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#create-internet-facing-endpoint
     #   @return [Array<String>]
     #
     # @!attribute [rw] subnet_ids
@@ -4929,6 +4964,15 @@ module Aws::Transfer
     # object is used for transferring files to and from a partner's SFTP
     # server.
     #
+    # <note markdown="1"> Because the `SftpConnectorConfig` data type is used for both creating
+    # and updating SFTP connectors, its parameters, `TrustedHostKeys` and
+    # `UserSecretId` are marked as not required. This is a bit misleading,
+    # as they are not required when you are updating an existing SFTP
+    # connector, but *are required* when you are creating a new SFTP
+    # connector.
+    #
+    #  </note>
+    #
     # @!attribute [rw] user_secret_id
     #   The identifier for the secret (in Amazon Web Services Secrets
     #   Manager) that contains the SFTP user's private key, password, or
@@ -4956,6 +5000,19 @@ module Aws::Transfer
     #     `ecdsa-sha2-nistp256`, `ecdsa-sha2-nistp384`, or
     #     `ecdsa-sha2-nistp521`, depending on the size of the key you
     #     generated.
+    #
+    #   Run this command to retrieve the SFTP server host key, where your
+    #   SFTP server name is `ftp.host.com`.
+    #
+    #   `ssh-keyscan ftp.host.com`
+    #
+    #   This prints the public host key to standard output.
+    #
+    #   `ftp.host.com ssh-rsa AAAAB3Nza...<long-string-for-public-key`
+    #
+    #   Copy and paste this string into the `TrustedHostKeys` field for the
+    #   `create-connector` command or into the **Trusted host keys** field
+    #   in the console.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transfer-2018-11-05/SftpConnectorConfig AWS API Documentation

data/lib/aws-sdk-transfer.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-transfer/customizations'
 # @!group service
 module Aws::Transfer
 
-  GEM_VERSION = '1.88.0'
+  GEM_VERSION = '1.89.0'
 
 end

data/sig/client.rbs

@@ -135,7 +135,7 @@ module Aws
                                 partner_profile_id: ::String?,
                                 message_subject: ::String?,
                                 compression: ("ZLIB" | "DISABLED")?,
-                                encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "NONE")?,
+                                encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "DES_EDE3_CBC" | "NONE")?,
                                 signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE")?,
                                 mdn_signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE" | "DEFAULT")?,
                                 mdn_response: ("SYNC" | "NONE")?,
@@ -952,7 +952,7 @@ module Aws
                                 partner_profile_id: ::String?,
                                 message_subject: ::String?,
                                 compression: ("ZLIB" | "DISABLED")?,
-                                encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "NONE")?,
+                                encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "DES_EDE3_CBC" | "NONE")?,
                                 signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE")?,
                                 mdn_signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE" | "DEFAULT")?,
                                 mdn_response: ("SYNC" | "NONE")?,

data/sig/types.rbs

@@ -18,7 +18,7 @@ module Aws::Transfer
       attr_accessor partner_profile_id: ::String
       attr_accessor message_subject: ::String
       attr_accessor compression: ("ZLIB" | "DISABLED")
-      attr_accessor encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "NONE")
+      attr_accessor encryption_algorithm: ("AES128_CBC" | "AES192_CBC" | "AES256_CBC" | "DES_EDE3_CBC" | "NONE")
       attr_accessor signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE")
       attr_accessor mdn_signing_algorithm: ("SHA256" | "SHA384" | "SHA512" | "SHA1" | "NONE" | "DEFAULT")
       attr_accessor mdn_response: ("SYNC" | "NONE")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-transfer
 version: !ruby/object:Gem::Version
-  version: 1.88.0
+  version: 1.89.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-26 00:00:00.000000000 Z
+date: 2024-03-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core