AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keys

AWS Transfer Family now allows storing SFTP server host keys in AWS Secrets Manager within your account, improving server identification control and simplifying migration or failover. Previously, Transfer Family stored host keys internally, preventing access to associated private key material. The update lets you choose Secrets Manager as the storage type when creating a server or importing host keys, enabling retrieval and reuse of private key material across servers or AWS regions, such as for standby or migration purposes. Clients no longer need to trust new host keys, and IAM policies control access to stored keys. Existing host keys can be migrated to Secrets Manager, though additional steps may be required; see the AWS Transfer Family user guide for details.

Why it matters

AWS Transfer Family is a service that helps you securely and efficiently transfer files using AWS managed services. This update makes host key management easier, allowing server migrations and failover to be safer and more efficient.