import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * Provides a AWS Transfer Server resource. * * > **NOTE on AWS IAM permissions:** If the `endpointType` is set to `VPC`, the `ec2:DescribeVpcEndpoints` and `ec2:ModifyVpcEndpoint` [actions](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html#amazonec2-actions-as-permissions) are used. * * > **NOTE:** Use the `aws.transfer.Tag` resource to manage the system tags used for [custom hostnames](https://docs.aws.amazon.com/transfer/latest/userguide/requirements-dns.html#tag-custom-hostname-cdk). * * ## Example Usage * * ### Basic * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", {tags: { * Name: "Example", * }}); * ``` * * ### Security Policy Name * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", {securityPolicyName: "TransferSecurityPolicy-2020-06"}); * ``` * * ### VPC Endpoint * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", { * endpointDetails: { * addressAllocationIds: [exampleAwsEip.id], * subnetIds: [exampleAwsSubnet.id], * vpcId: exampleAwsVpc.id, * }, * endpointType: "VPC", * }); * ``` * * ### AWS Directory authentication * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", { * identityProviderType: "AWS_DIRECTORY_SERVICE", * directoryId: exampleAwsDirectoryServiceDirectory.id, * }); * ``` * * ### AWS Lambda authentication * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", { * identityProviderType: "AWS_LAMBDA", * "function": exampleAwsLambdaFunction.arn, * }); * ``` * * ### Protocols * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.transfer.Server("example", { * endpointDetails: { * subnetIds: [exampleAwsSubnet.id], * vpcId: exampleAwsVpc.id, * }, * endpointType: "VPC", * protocols: [ * "FTP", * "FTPS", * ], * certificate: exampleAwsAcmCertificate.arn, * identityProviderType: "API_GATEWAY", * url: `${exampleAwsApiGatewayDeployment.invokeUrl}${exampleAwsApiGatewayResource.path}`, * }); * ``` * * ### Using Structured Logging Destinations * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const transfer = new aws.cloudwatch.LogGroup("transfer", {namePrefix: "transfer_test_"}); * const transferAssumeRole = aws.iam.getPolicyDocument({ * statements: [{ * principals: [{ * type: "Service", * identifiers: ["transfer.amazonaws.com"], * }], * effect: "Allow", * actions: ["sts:AssumeRole"], * }], * }); * const iamForTransfer = new aws.iam.Role("iam_for_transfer", { * namePrefix: "iam_for_transfer_", * assumeRolePolicy: transferAssumeRole.then(transferAssumeRole => transferAssumeRole.json), * managedPolicyArns: ["arn:aws:iam::aws:policy/service-role/AWSTransferLoggingAccess"], * }); * const transferServer = new aws.transfer.Server("transfer", { * endpointType: "PUBLIC", * loggingRole: iamForTransfer.arn, * protocols: ["SFTP"], * structuredLogDestinations: [pulumi.interpolate`${transfer.arn}:*`], * }); * ``` * * ## Import * * In Terraform v1.5.0 and later, use an `import` Block to import Transfer Servers using the server `id`. For example: * * Using `pulumi import`, import Transfer Servers using the server `id`. For example: * * ```sh * $ pulumi import aws:transfer/server:Server example s-12345678 * ``` * * Certain resource arguments, such as `hostKey`, cannot be read via the API and imported into the provider. This provider will display a difference for these arguments the first run after import if declared in the provider configuration for an imported resource. */ export declare class Server extends pulumi.CustomResource { /** * Get an existing Server resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: ServerState, opts?: pulumi.CustomResourceOptions): Server; /** * Returns true if the given object is an instance of Server. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is Server; /** * ARN of Transfer Server */ readonly arn: pulumi.Output; /** * ARN of the AWS Certificate Manager (ACM) certificate. Required when `protocols` is set to `FTPS`. */ readonly certificate: pulumi.Output; /** * Directory service ID of the directory service you want to connect to with an `identityProviderType` of `AWS_DIRECTORY_SERVICE`. */ readonly directoryId: pulumi.Output; /** * Domain of the storage system that is used for file transfers. Valid values are: `S3` and `EFS`. The default value is `S3`. */ readonly domain: pulumi.Output; /** * Endpoint of the Transfer Server (e.g., `s-12345678.server.transfer.REGION.amazonaws.com`) */ readonly endpoint: pulumi.Output; /** * VPC endpoint settings that you want to configure for your SFTP server. See `endpointDetails` Block below for details. */ readonly endpointDetails: pulumi.Output; /** * Type of endpoint that you want your SFTP server connect to. If you connect to a `VPC` (or `VPC_ENDPOINT`), your SFTP server isn't accessible over the public internet. If you want to connect your SFTP server via public internet, set `PUBLIC`. Defaults to `PUBLIC`. */ readonly endpointType: pulumi.Output; /** * Boolean that indicates all users associated with the server should be deleted so that the Server can be destroyed without error. The default value is `false`. This option only applies to servers configured with a `SERVICE_MANAGED` `identityProviderType`. */ readonly forceDestroy: pulumi.Output; /** * ARN for a lambda function to use for the Identity provider with an `identityProviderType` of `AWS_LAMBDA`. */ readonly function: pulumi.Output; /** * RSA, ECDSA, or ED25519 private key (e.g., as generated by the `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`, `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key` or `ssh-keygen -t ed25519 -N "" -f my-new-server-key` commands). */ readonly hostKey: pulumi.Output; /** * Message-digest algorithm (MD5) hash of the server's host key. This value is equivalent to the output of the `ssh-keygen -l -E md5 -f my-new-server-key` command. */ readonly hostKeyFingerprint: pulumi.Output; /** * Mode of authentication enabled for this service. The default value is `SERVICE_MANAGED`, which allows you to store and access SFTP user credentials within the service. `API_GATEWAY` indicates that user authentication requires a call to an API Gateway endpoint URL provided by you to integrate an identity provider of your choice. Using `AWS_DIRECTORY_SERVICE` will allow for authentication against AWS Managed Active Directory or Microsoft Active Directory in your on-premises environment, or in AWS using AD Connectors. Use the `AWS_LAMBDA` value to directly use a Lambda function as your identity provider. If you choose this value, you must specify the ARN for the lambda function in the `function` argument. */ readonly identityProviderType: pulumi.Output; /** * ARN of the IAM role used to authenticate the user account with an `identityProviderType` of `API_GATEWAY`. */ readonly invocationRole: pulumi.Output; /** * Type of IP addresses for the AWS Transfer Family endpoint. Valid values are `IPV4` and `DUALSTACK`. The default value is `IPV4`. When `ipAddressType` is set to `DUALSTACK`, `addressAllocationIds` cannot be specified in the `endpointDetails` block. Updating `ipAddressType` stops the server and then restarts it with the new `ipAddressType` value. */ readonly ipAddressType: pulumi.Output; /** * ARN of an IAM role that allows the service to write your SFTP users’ activity to your Amazon CloudWatch logs for monitoring and auditing purposes. */ readonly loggingRole: pulumi.Output; /** * Specify a string to display when users connect to a server. This string is displayed after the user authenticates. The SFTP protocol does not support post-authentication display banners. */ readonly postAuthenticationLoginBanner: pulumi.Output; /** * Specify a string to display when users connect to a server. This string is displayed before the user authenticates. */ readonly preAuthenticationLoginBanner: pulumi.Output; /** * Protocol settings that are configured for your server. See `protocolDetails` Block below for details. */ readonly protocolDetails: pulumi.Output; /** * File transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. This defaults to `SFTP`. The available protocols are `AS2` (file transfer over Applicability Statement 2), `SFTP` (file transfer over SSH), `FTPS` (file transfer with TLS encryption), and `FTP` (unencrypted file transfer). */ readonly protocols: pulumi.Output; /** * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration. */ readonly region: pulumi.Output; /** * Whether performance for your Amazon S3 directories is optimized. This is disabled by default. See `s3StorageOptions` Block below for details. */ readonly s3StorageOptions: pulumi.Output; /** * Name of the security policy that is attached to the server. Default value is: `TransferSecurityPolicy-2018-11`. The available values are `TransferSecurityPolicy-2018-11`, `TransferSecurityPolicy-2020-06`, `TransferSecurityPolicy-2022-03`, `TransferSecurityPolicy-2023-05`, `TransferSecurityPolicy-2024-01`, `TransferSecurityPolicy-2025-03`, `TransferSecurityPolicy-FIPS-2020-06`, `TransferSecurityPolicy-FIPS-2023-05`, `TransferSecurityPolicy-FIPS-2024-01`, `TransferSecurityPolicy-FIPS-2024-05`, `TransferSecurityPolicy-FIPS-2025-03`, `TransferSecurityPolicy-PQ-SSH-Experimental-2023-04`, `TransferSecurityPolicy-PQ-SSH-FIPS-Experimental-2023-04`, `TransferSecurityPolicy-Restricted-2018-11`, `TransferSecurityPolicy-Restricted-2020-06`, `TransferSecurityPolicy-Restricted-2024-06`, `TransferSecurityPolicy-SshAuditCompliant-2025-02`, and `TransferSecurityPolicy-AS2Restricted-2025-07`. See [Security policies for AWS Transfer Family servers](https://docs.aws.amazon.com/transfer/latest/userguide/security-policies.html) for details. */ readonly securityPolicyName: pulumi.Output; /** * For SFTP-enabled servers with an `identityProviderType` of `API_GATEWAY` or `AWS_LAMBDA`. Valid values are `PASSWORD`, `PUBLIC_KEY`, `PUBLIC_KEY_OR_PASSWORD` and `PUBLIC_KEY_AND_PASSWORD`. Default value is: `PUBLIC_KEY_OR_PASSWORD`. */ readonly sftpAuthenticationMethods: pulumi.Output; /** * Set of ARNs of destinations that will receive structured logs from the transfer server such as CloudWatch Log Group ARNs. If provided this enables the transfer server to emit structured logs to the specified locations. */ readonly structuredLogDestinations: pulumi.Output; /** * Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level. */ readonly tags: pulumi.Output<{ [key: string]: string; } | undefined>; /** * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block. */ readonly tagsAll: pulumi.Output<{ [key: string]: string; }>; /** * URL of the service endpoint used to authenticate users with an `identityProviderType` of `API_GATEWAY`. */ readonly url: pulumi.Output; /** * Workflow details. See `workflowDetails` Block below for details. */ readonly workflowDetails: pulumi.Output; /** * Create a Server resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args?: ServerArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering Server resources. */ export interface ServerState { /** * ARN of Transfer Server */ arn?: pulumi.Input; /** * ARN of the AWS Certificate Manager (ACM) certificate. Required when `protocols` is set to `FTPS`. */ certificate?: pulumi.Input; /** * Directory service ID of the directory service you want to connect to with an `identityProviderType` of `AWS_DIRECTORY_SERVICE`. */ directoryId?: pulumi.Input; /** * Domain of the storage system that is used for file transfers. Valid values are: `S3` and `EFS`. The default value is `S3`. */ domain?: pulumi.Input; /** * Endpoint of the Transfer Server (e.g., `s-12345678.server.transfer.REGION.amazonaws.com`) */ endpoint?: pulumi.Input; /** * VPC endpoint settings that you want to configure for your SFTP server. See `endpointDetails` Block below for details. */ endpointDetails?: pulumi.Input; /** * Type of endpoint that you want your SFTP server connect to. If you connect to a `VPC` (or `VPC_ENDPOINT`), your SFTP server isn't accessible over the public internet. If you want to connect your SFTP server via public internet, set `PUBLIC`. Defaults to `PUBLIC`. */ endpointType?: pulumi.Input; /** * Boolean that indicates all users associated with the server should be deleted so that the Server can be destroyed without error. The default value is `false`. This option only applies to servers configured with a `SERVICE_MANAGED` `identityProviderType`. */ forceDestroy?: pulumi.Input; /** * ARN for a lambda function to use for the Identity provider with an `identityProviderType` of `AWS_LAMBDA`. */ function?: pulumi.Input; /** * RSA, ECDSA, or ED25519 private key (e.g., as generated by the `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`, `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key` or `ssh-keygen -t ed25519 -N "" -f my-new-server-key` commands). */ hostKey?: pulumi.Input; /** * Message-digest algorithm (MD5) hash of the server's host key. This value is equivalent to the output of the `ssh-keygen -l -E md5 -f my-new-server-key` command. */ hostKeyFingerprint?: pulumi.Input; /** * Mode of authentication enabled for this service. The default value is `SERVICE_MANAGED`, which allows you to store and access SFTP user credentials within the service. `API_GATEWAY` indicates that user authentication requires a call to an API Gateway endpoint URL provided by you to integrate an identity provider of your choice. Using `AWS_DIRECTORY_SERVICE` will allow for authentication against AWS Managed Active Directory or Microsoft Active Directory in your on-premises environment, or in AWS using AD Connectors. Use the `AWS_LAMBDA` value to directly use a Lambda function as your identity provider. If you choose this value, you must specify the ARN for the lambda function in the `function` argument. */ identityProviderType?: pulumi.Input; /** * ARN of the IAM role used to authenticate the user account with an `identityProviderType` of `API_GATEWAY`. */ invocationRole?: pulumi.Input; /** * Type of IP addresses for the AWS Transfer Family endpoint. Valid values are `IPV4` and `DUALSTACK`. The default value is `IPV4`. When `ipAddressType` is set to `DUALSTACK`, `addressAllocationIds` cannot be specified in the `endpointDetails` block. Updating `ipAddressType` stops the server and then restarts it with the new `ipAddressType` value. */ ipAddressType?: pulumi.Input; /** * ARN of an IAM role that allows the service to write your SFTP users’ activity to your Amazon CloudWatch logs for monitoring and auditing purposes. */ loggingRole?: pulumi.Input; /** * Specify a string to display when users connect to a server. This string is displayed after the user authenticates. The SFTP protocol does not support post-authentication display banners. */ postAuthenticationLoginBanner?: pulumi.Input; /** * Specify a string to display when users connect to a server. This string is displayed before the user authenticates. */ preAuthenticationLoginBanner?: pulumi.Input; /** * Protocol settings that are configured for your server. See `protocolDetails` Block below for details. */ protocolDetails?: pulumi.Input; /** * File transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. This defaults to `SFTP`. The available protocols are `AS2` (file transfer over Applicability Statement 2), `SFTP` (file transfer over SSH), `FTPS` (file transfer with TLS encryption), and `FTP` (unencrypted file transfer). */ protocols?: pulumi.Input[] | undefined>; /** * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration. */ region?: pulumi.Input; /** * Whether performance for your Amazon S3 directories is optimized. This is disabled by default. See `s3StorageOptions` Block below for details. */ s3StorageOptions?: pulumi.Input; /** * Name of the security policy that is attached to the server. Default value is: `TransferSecurityPolicy-2018-11`. The available values are `TransferSecurityPolicy-2018-11`, `TransferSecurityPolicy-2020-06`, `TransferSecurityPolicy-2022-03`, `TransferSecurityPolicy-2023-05`, `TransferSecurityPolicy-2024-01`, `TransferSecurityPolicy-2025-03`, `TransferSecurityPolicy-FIPS-2020-06`, `TransferSecurityPolicy-FIPS-2023-05`, `TransferSecurityPolicy-FIPS-2024-01`, `TransferSecurityPolicy-FIPS-2024-05`, `TransferSecurityPolicy-FIPS-2025-03`, `TransferSecurityPolicy-PQ-SSH-Experimental-2023-04`, `TransferSecurityPolicy-PQ-SSH-FIPS-Experimental-2023-04`, `TransferSecurityPolicy-Restricted-2018-11`, `TransferSecurityPolicy-Restricted-2020-06`, `TransferSecurityPolicy-Restricted-2024-06`, `TransferSecurityPolicy-SshAuditCompliant-2025-02`, and `TransferSecurityPolicy-AS2Restricted-2025-07`. See [Security policies for AWS Transfer Family servers](https://docs.aws.amazon.com/transfer/latest/userguide/security-policies.html) for details. */ securityPolicyName?: pulumi.Input; /** * For SFTP-enabled servers with an `identityProviderType` of `API_GATEWAY` or `AWS_LAMBDA`. Valid values are `PASSWORD`, `PUBLIC_KEY`, `PUBLIC_KEY_OR_PASSWORD` and `PUBLIC_KEY_AND_PASSWORD`. Default value is: `PUBLIC_KEY_OR_PASSWORD`. */ sftpAuthenticationMethods?: pulumi.Input; /** * Set of ARNs of destinations that will receive structured logs from the transfer server such as CloudWatch Log Group ARNs. If provided this enables the transfer server to emit structured logs to the specified locations. */ structuredLogDestinations?: pulumi.Input[] | undefined>; /** * Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block. */ tagsAll?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * URL of the service endpoint used to authenticate users with an `identityProviderType` of `API_GATEWAY`. */ url?: pulumi.Input; /** * Workflow details. See `workflowDetails` Block below for details. */ workflowDetails?: pulumi.Input; } /** * The set of arguments for constructing a Server resource. */ export interface ServerArgs { /** * ARN of the AWS Certificate Manager (ACM) certificate. Required when `protocols` is set to `FTPS`. */ certificate?: pulumi.Input; /** * Directory service ID of the directory service you want to connect to with an `identityProviderType` of `AWS_DIRECTORY_SERVICE`. */ directoryId?: pulumi.Input; /** * Domain of the storage system that is used for file transfers. Valid values are: `S3` and `EFS`. The default value is `S3`. */ domain?: pulumi.Input; /** * VPC endpoint settings that you want to configure for your SFTP server. See `endpointDetails` Block below for details. */ endpointDetails?: pulumi.Input; /** * Type of endpoint that you want your SFTP server connect to. If you connect to a `VPC` (or `VPC_ENDPOINT`), your SFTP server isn't accessible over the public internet. If you want to connect your SFTP server via public internet, set `PUBLIC`. Defaults to `PUBLIC`. */ endpointType?: pulumi.Input; /** * Boolean that indicates all users associated with the server should be deleted so that the Server can be destroyed without error. The default value is `false`. This option only applies to servers configured with a `SERVICE_MANAGED` `identityProviderType`. */ forceDestroy?: pulumi.Input; /** * ARN for a lambda function to use for the Identity provider with an `identityProviderType` of `AWS_LAMBDA`. */ function?: pulumi.Input; /** * RSA, ECDSA, or ED25519 private key (e.g., as generated by the `ssh-keygen -t rsa -b 2048 -N "" -m PEM -f my-new-server-key`, `ssh-keygen -t ecdsa -b 256 -N "" -m PEM -f my-new-server-key` or `ssh-keygen -t ed25519 -N "" -f my-new-server-key` commands). */ hostKey?: pulumi.Input; /** * Mode of authentication enabled for this service. The default value is `SERVICE_MANAGED`, which allows you to store and access SFTP user credentials within the service. `API_GATEWAY` indicates that user authentication requires a call to an API Gateway endpoint URL provided by you to integrate an identity provider of your choice. Using `AWS_DIRECTORY_SERVICE` will allow for authentication against AWS Managed Active Directory or Microsoft Active Directory in your on-premises environment, or in AWS using AD Connectors. Use the `AWS_LAMBDA` value to directly use a Lambda function as your identity provider. If you choose this value, you must specify the ARN for the lambda function in the `function` argument. */ identityProviderType?: pulumi.Input; /** * ARN of the IAM role used to authenticate the user account with an `identityProviderType` of `API_GATEWAY`. */ invocationRole?: pulumi.Input; /** * Type of IP addresses for the AWS Transfer Family endpoint. Valid values are `IPV4` and `DUALSTACK`. The default value is `IPV4`. When `ipAddressType` is set to `DUALSTACK`, `addressAllocationIds` cannot be specified in the `endpointDetails` block. Updating `ipAddressType` stops the server and then restarts it with the new `ipAddressType` value. */ ipAddressType?: pulumi.Input; /** * ARN of an IAM role that allows the service to write your SFTP users’ activity to your Amazon CloudWatch logs for monitoring and auditing purposes. */ loggingRole?: pulumi.Input; /** * Specify a string to display when users connect to a server. This string is displayed after the user authenticates. The SFTP protocol does not support post-authentication display banners. */ postAuthenticationLoginBanner?: pulumi.Input; /** * Specify a string to display when users connect to a server. This string is displayed before the user authenticates. */ preAuthenticationLoginBanner?: pulumi.Input; /** * Protocol settings that are configured for your server. See `protocolDetails` Block below for details. */ protocolDetails?: pulumi.Input; /** * File transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. This defaults to `SFTP`. The available protocols are `AS2` (file transfer over Applicability Statement 2), `SFTP` (file transfer over SSH), `FTPS` (file transfer with TLS encryption), and `FTP` (unencrypted file transfer). */ protocols?: pulumi.Input[] | undefined>; /** * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration. */ region?: pulumi.Input; /** * Whether performance for your Amazon S3 directories is optimized. This is disabled by default. See `s3StorageOptions` Block below for details. */ s3StorageOptions?: pulumi.Input; /** * Name of the security policy that is attached to the server. Default value is: `TransferSecurityPolicy-2018-11`. The available values are `TransferSecurityPolicy-2018-11`, `TransferSecurityPolicy-2020-06`, `TransferSecurityPolicy-2022-03`, `TransferSecurityPolicy-2023-05`, `TransferSecurityPolicy-2024-01`, `TransferSecurityPolicy-2025-03`, `TransferSecurityPolicy-FIPS-2020-06`, `TransferSecurityPolicy-FIPS-2023-05`, `TransferSecurityPolicy-FIPS-2024-01`, `TransferSecurityPolicy-FIPS-2024-05`, `TransferSecurityPolicy-FIPS-2025-03`, `TransferSecurityPolicy-PQ-SSH-Experimental-2023-04`, `TransferSecurityPolicy-PQ-SSH-FIPS-Experimental-2023-04`, `TransferSecurityPolicy-Restricted-2018-11`, `TransferSecurityPolicy-Restricted-2020-06`, `TransferSecurityPolicy-Restricted-2024-06`, `TransferSecurityPolicy-SshAuditCompliant-2025-02`, and `TransferSecurityPolicy-AS2Restricted-2025-07`. See [Security policies for AWS Transfer Family servers](https://docs.aws.amazon.com/transfer/latest/userguide/security-policies.html) for details. */ securityPolicyName?: pulumi.Input; /** * For SFTP-enabled servers with an `identityProviderType` of `API_GATEWAY` or `AWS_LAMBDA`. Valid values are `PASSWORD`, `PUBLIC_KEY`, `PUBLIC_KEY_OR_PASSWORD` and `PUBLIC_KEY_AND_PASSWORD`. Default value is: `PUBLIC_KEY_OR_PASSWORD`. */ sftpAuthenticationMethods?: pulumi.Input; /** * Set of ARNs of destinations that will receive structured logs from the transfer server such as CloudWatch Log Group ARNs. If provided this enables the transfer server to emit structured logs to the specified locations. */ structuredLogDestinations?: pulumi.Input[] | undefined>; /** * Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * URL of the service endpoint used to authenticate users with an `identityProviderType` of `API_GATEWAY`. */ url?: pulumi.Input; /** * Workflow details. See `workflowDetails` Block below for details. */ workflowDetails?: pulumi.Input; } //# sourceMappingURL=server.d.ts.map