AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover.
Previously, Transfer Family stored host keys within the service, so you could not retrieve the associated private key material. With this launch, you can choose Secrets Manager as the storage type when creating a server, importing a host key, or updating an existing one. You can then retrieve the private key material and reuse the same host key across servers and AWS Regions. For example, you can use it on a standby server for failover or on a replacement server during migration, without requiring clients to trust a new host key. AWS Identity and Access Management (IAM) policies let you control who can retrieve the stored keys.
This capability is available in all AWS Regions where AWS Transfer Family is available. To learn more, see Managing host keys in the AWS Transfer Family User Guide. To get started, go to the AWS Transfer Family console
Categories: marketing:marchitecture/migration,general:products/aws-transfer-family,general:products/aws-secrets-manager
Source: Amazon Web Services
