AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keys

AWS Transfer Family Updates

AWS Transfer Family now allows you to store SFTP server host keys in AWS Secrets Manager in your own AWS account, providing greater control over your server identity and simplifying server migrations and failover.

Previously, Transfer Family stored host keys within the service, preventing retrieval of the associated private key material. With this update, you can choose Secrets Manager as the storage type when creating a server or importing a host key. You can then retrieve the private key material and reuse the same host key across servers and AWS Regions.

What to do

• Choose Secrets Manager as the storage type when creating a server or importing a host key.
• Retrieve the private key material and reuse the same host key across servers and AWS Regions.
• Control who can retrieve the stored keys using IAM policies.
• Migrate existing host keys to Secrets Manager, following the steps in the AWS Transfer Family User Guide.

This capability is available in all AWS Regions where AWS Transfer Family is available.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.