AWS Transfer Family SFTP connectors now support VPC-based connectivity, allowing secure file transfers between Amazon S3 and remote SFTP servers through your existing VPC infrastructure without exposing endpoints to the internet.

AWS Transfer Family SFTP connectors now support VPC-based connectivity, allowing secure file transfers between Amazon S3 and remote SFTP servers through your existing VPC infrastructure without exposing endpoints to the internet.

AWS Transfer Family now enables you to change your server's identity provider (IdP) type without service interruption. This enhancement gives you more control and flexibility over authentication management in your file transfer workflows, enabling you to adapt quickly to changing business requirements. AWS Transfer Family provides fully managed file transfers over SFTP, FTP, FTPS, AS2, and web-browser based interfaces. With this launch, you can now dynamically switch between service managed authentication, Active Directory, and custom IdP configurations for SFTP, FTPS, and FTP servers. This enables you to implement zero-downtime authentication migration and meet evolving compliance requirements.  Changing IDP type is available in all AWS Regions where the service is available. To learn more, visit the Transfer Family User Guide.

AWS Transfer Family now enables you to change your server's identity provider (IdP) type without service interruption. This enhancement gives you more control and flexibility over authentication management in your file transfer workflows, enabling you to adapt quickly to changing business requirements. AWS Transfer Family provides fully managed file transfers over SFTP, FTP, FTPS, AS2, and web-browser based interfaces. With this launch, you can now dynamically switch between service managed authentication, Active Directory, and custom IdP configurations for SFTP, FTPS, and FTP servers. This enables you to implement zero-downtime authentication migration and meet evolving compliance requirements.  Changing IDP type is available in all https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/. To learn more, visit the https://docs.aws.amazon.com/transfer/latest/userguide/configuring-servers-edit-custom-idp.html.

AWS Transfer Family now supports four new service-specific condition keys for Identity and Access Management (IAM). With this feature, administrators can create more granular IAM policies and service control policies (SCPs) to restrict configurations for Transfer Family resources, enhancing security controls and compliance management.  IAM condition keys allow you to author policies that enforce access control based on API request context. With these new condition keys, you can now author policies based on Transfer Family context to control which protocols, endpoint types, and storage domains can be configured through policy conditions. For example, you can use transfer:RequestServerEndpointType to prevent the creation of public servers, or transfer:RequestServerProtocols to ensure only SFTP servers can be created, enabling you to define additional permission guardrails for Transfer Family actions.  The new IAM condition keys are available in all https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/ To learn more, visit thehttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awstransferfamily.html  and https://docs.aws.amazon.com/transfer/latest/userguide/transfer-condition-keys.html. To learn more about how to manage permissions within your organization through SCPs, visit the https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html.

AWS Transfer Family now supports four new service-specific condition keys for Identity and Access Management (IAM). With this feature, administrators can create more granular IAM policies and service control policies (SCPs) to restrict configurations for Transfer Family resources, enhancing security controls and compliance management.  IAM condition keys allow you to author policies that enforce access control based on API request context. With these new condition keys, you can now author policies based on Transfer Family context to control which protocols, endpoint types, and storage domains can be configured through policy conditions. For example, you can use transfer:RequestServerEndpointType to prevent the creation of public servers, or transfer:RequestServerProtocols to ensure only SFTP servers can be created, enabling you to define additional permission guardrails for Transfer Family actions.  The new IAM condition keys are available in all AWS Regions where AWS Transfer Family is available. To learn more, visit the IAM Service Authorization Reference and Transfer Family User Guide. To learn more about how to manage permissions within your organization through SCPs, visit the AWS Organizations User Guide.

The AWS Transfer Family Terraform module now supports deploying Transfer Family endpoints with a custom identity provider (IdP) for authentication and access control. This allows you to automate and streamline the deployment of Transfer Family servers integrated with your existing identity providers. AWS Transfer Family provides fully-managed file transfers over SFTP, AS2, FTPS, FTP, and web browser-based interfaces for AWS storage services. Using this new module, you can now use Terraform to provision Transfer Family server resources using your custom authentication systems, eliminating manual configurations and enabling repeatable deployments that scale with your business needs. The module is built on the open source Custom IdP solution which provides standardized integration with widely-used identity providers and includes built-in security controls such as multi-factor authentication, audit logging, and per-user IP allowlisting. To help you get started, the Terraform module includes an end-to-end example using Amazon Cognito user pools.  Customers can get started by using the new module from the Terraform Registry. To learn more about the Transfer Family Custom IdP solution, visit the user guide. To see all the regions where Transfer Family is available, visit the AWS Region table.

AWS Transfer Family customers can now access file system data stored in Amazon FSx for NetApp ONTAP over SFTP, FTPS, and FTP.  AWS Transfer Family provides fully managed file transfers over SFTP, FTP, FTPS, AS2, and web browser-based interfaces. With this launch, you can now access FSx for ONTAP file systems over Transfer Family’s supported protocols through S3 Access Points, while maintaining access via native file protocols (NFS/SMB). This allows you to maintain existing file system workflows while adding secure access via industry-standard protocols for external partners and internal users. Access is controlled through standard IAM policies and S3 Access Point configurations, helping you meet data security and compliance requirements. Transfer Family support for FSx for ONTAP is available in select https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/accessing-data-via-s3-access-points.html#access-points-for-fsx-ontap-supported-regions. To get started, visit the AWS Transfer Family console, or use AWS CLI/SDK. To learn more, visit the Transfer Family https://docs.aws.amazon.com/transfer/latest/userguide/fsx-s3-access-points.html.

The https://github.com/aws-ia/terraform-aws-transfer-family now supports deploying Transfer Family endpoints with a custom identity provider (IdP) for authentication and access control. This allows you to automate and streamline the deployment of Transfer Family servers integrated with your existing identity providers. AWS Transfer Family provides fully-managed file transfers over SFTP, AS2, FTPS, FTP, and web browser-based interfaces for AWS storage services. Using this new module, you can now use Terraform to provision Transfer Family server resources using your custom authentication systems, eliminating manual configurations and enabling repeatable deployments that scale with your business needs. The module is built on the open source https://github.com/aws-samples/toolkit-for-aws-transfer-family/tree/main/solutions/custom-idp which provides standardized integration with widely-used identity providers and includes built-in security controls such as multi-factor authentication, audit logging, and per-user IP allowlisting. To help you get started, the Terraform module includes an end-to-end example using Amazon Cognito user pools.  Customers can get started by using the new module from the https://registry.terraform.io/modules/aws-ia/transfer-family/aws/latest. To learn more about the Transfer Family Custom IdP solution, visit the https://docs.aws.amazon.com/transfer/latest/userguide/custom-idp-toolkit.html. To see all the regions where Transfer Family is available, visit the https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/.

AWS Transfer Family customers can now access file system data stored in Amazon FSx for NetApp ONTAP over SFTP, FTPS, and FTP.  AWS Transfer Family provides fully managed file transfers over SFTP, FTP, FTPS, AS2, and web browser-based interfaces. With this launch, you can now access FSx for ONTAP file systems over Transfer Family’s supported protocols through S3 Access Points, while maintaining access via native file protocols (NFS/SMB). This allows you to maintain existing file system workflows while adding secure access via industry-standard protocols for external partners and internal users. Access is controlled through standard IAM policies and S3 Access Point configurations, helping you meet data security and compliance requirements. Transfer Family support for FSx for ONTAP is available in select AWS Regions. To get started, visit the AWS Transfer Family console, or use AWS CLI/SDK. To learn more, visit the Transfer Family User Guide.