AWS API Changes

2022/11/18 - AWS Transfer Family - 3 updated api methods

Changes Adds a NONE encryption algorithm type to AS2 connectors, providing support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.

CreateConnector (updated)

Link ¶
Changes (request)

{'As2Config': {'EncryptionAlgorithm': {'NONE'}}}

Creates the connector, which captures the parameters for an outbound connection for the AS2 protocol. The connector is required for sending files to an externally hosted AS2 server. For more details about connectors, see Create AS2 connectors .

See also: AWS API Documentation

Request Syntax

client.create_connector(
    Url='string',
    As2Config={
        'LocalProfileId': 'string',
        'PartnerProfileId': 'string',
        'MessageSubject': 'string',
        'Compression': 'ZLIB'|'DISABLED',
        'EncryptionAlgorithm': 'AES128_CBC'|'AES192_CBC'|'AES256_CBC'|'NONE',
        'SigningAlgorithm': 'SHA256'|'SHA384'|'SHA512'|'SHA1'|'NONE',
        'MdnSigningAlgorithm': 'SHA256'|'SHA384'|'SHA512'|'SHA1'|'NONE'|'DEFAULT',
        'MdnResponse': 'SYNC'|'NONE'
    },
    AccessRole='string',
    LoggingRole='string',
    Tags=[
        {
            'Key': 'string',
            'Value': 'string'
        },
    ]
)

type Url

string

param Url

[REQUIRED]

The URL of the partner's AS2 endpoint.

type As2Config

dict

param As2Config

[REQUIRED]

A structure that contains the parameters for a connector object.

LocalProfileId (string) --

A unique identifier for the AS2 local profile.
PartnerProfileId (string) --

A unique identifier for the partner profile for the connector.
MessageSubject (string) --

Used as the Subject HTTP header attribute in AS2 messages that are being sent with the connector.
Compression (string) --

Specifies whether the AS2 file is compressed.
EncryptionAlgorithm (string) --

The algorithm that is used to encrypt the file.

Note

You can only specify NONE if the URL for your connector uses HTTPS. This ensures that no traffic is sent in clear text.
SigningAlgorithm (string) --

The algorithm that is used to sign the AS2 messages sent with the connector.
MdnSigningAlgorithm (string) --

The signing algorithm for the MDN response.

Note

If set to DEFAULT (or not set at all), the value for SigningAlgorithm is used.
MdnResponse (string) --

Used for outbound requests (from an Transfer Family server to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous. Specify either of the following values:
- SYNC : The system expects a synchronous MDN response, confirming that the file was transferred successfully (or not).
- NONE : Specifies that no MDN response is required.

type AccessRole

string

param AccessRole

[REQUIRED]

With AS2, you can send files by calling StartFileTransfer and specifying the file paths in the request parameter, SendFilePaths . We use the file’s parent directory (for example, for --send-file-paths /bucket/dir/file.txt , parent directory is /bucket/dir/ ) to temporarily store a processed AS2 message file, store the MDN when we receive them from the partner, and write a final JSON file containing relevant metadata of the transmission. So, the AccessRole needs to provide read and write access to the parent directory of the file location used in the StartFileTransfer request. Additionally, you need to provide read and write access to the parent directory of the files that you intend to send with StartFileTransfer .

type LoggingRole

string

param LoggingRole

The Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role that allows a connector to turn on CloudWatch logging for Amazon S3 events. When set, you can view connector activity in your CloudWatch logs.

type Tags

list

param Tags

Key-value pairs that can be used to group and search for connectors. Tags are metadata attached to connectors for any purpose.

(dict) --

Creates a key-value pair for a specific resource. Tags are metadata that you can use to search for and group a resource for various purposes. You can apply tags to servers, users, and roles. A tag key can take more than one value. For example, to group servers for accounting purposes, you might create a tag called Group and assign the values Research and Accounting to that group.
- Key (string) -- [REQUIRED]
  
  The name assigned to the tag that you create.
- Value (string) -- [REQUIRED]
  
  Contains one or more values that you assigned to the key name you create.

rtype

dict

returns

Response Syntax

{
    'ConnectorId': 'string'
}

Response Structure

(dict) --
- ConnectorId (string) --
  
  The unique identifier for the connector, returned after the API call succeeds.

DescribeConnector (updated)

Link ¶
Changes (response)

{'Connector': {'As2Config': {'EncryptionAlgorithm': {'NONE'}}}}

Describes the connector that's identified by the ConnectorId.

See also: AWS API Documentation

Request Syntax

client.describe_connector(
    ConnectorId='string'
)

type ConnectorId

string

param ConnectorId

[REQUIRED]

The unique identifier for the connector.

rtype

dict

returns

Response Syntax

{
    'Connector': {
        'Arn': 'string',
        'ConnectorId': 'string',
        'Url': 'string',
        'As2Config': {
            'LocalProfileId': 'string',
            'PartnerProfileId': 'string',
            'MessageSubject': 'string',
            'Compression': 'ZLIB'|'DISABLED',
            'EncryptionAlgorithm': 'AES128_CBC'|'AES192_CBC'|'AES256_CBC'|'NONE',
            'SigningAlgorithm': 'SHA256'|'SHA384'|'SHA512'|'SHA1'|'NONE',
            'MdnSigningAlgorithm': 'SHA256'|'SHA384'|'SHA512'|'SHA1'|'NONE'|'DEFAULT',
            'MdnResponse': 'SYNC'|'NONE'
        },
        'AccessRole': 'string',
        'LoggingRole': 'string',
        'Tags': [
            {
                'Key': 'string',
                'Value': 'string'
            },
        ]
    }
}

Response Structure

(dict) --
- Connector (dict) --
  
  The structure that contains the details of the connector.
  - Arn (string) --
    
    The unique Amazon Resource Name (ARN) for the connector.
  - ConnectorId (string) --
    
    The unique identifier for the connector.
  - Url (string) --
    
    The URL of the partner's AS2 endpoint.
  - As2Config (dict) --
    
    A structure that contains the parameters for a connector object.
    - LocalProfileId (string) --
      
      A unique identifier for the AS2 local profile.
    - PartnerProfileId (string) --
      
      A unique identifier for the partner profile for the connector.
    - MessageSubject (string) --
      
      Used as the Subject HTTP header attribute in AS2 messages that are being sent with the connector.
    - Compression (string) --
      
      Specifies whether the AS2 file is compressed.
    - EncryptionAlgorithm (string) --
      
      The algorithm that is used to encrypt the file.
      
      Note
      
      You can only specify NONE if the URL for your connector uses HTTPS. This ensures that no traffic is sent in clear text.
    - SigningAlgorithm (string) --
      
      The algorithm that is used to sign the AS2 messages sent with the connector.
    - MdnSigningAlgorithm (string) --
      
      The signing algorithm for the MDN response.
      
      Note
      
      If set to DEFAULT (or not set at all), the value for SigningAlgorithm is used.
    - MdnResponse (string) --
      
      Used for outbound requests (from an Transfer Family server to a partner AS2 server) to determine whether the partner response for transfers is synchronous or asynchronous. Specify either of the following values:
      - SYNC : The system expects a synchronous MDN response, confirming that the file was transferred successfully (or not).
      - NONE : Specifies that no MDN response is required.
  - AccessRole (string) --
    
    With AS2, you can send files by calling StartFileTransfer and specifying the file paths in the request parameter, SendFilePaths . We use the file’s parent directory (for example, for --send-file-paths /bucket/dir/file.txt , parent directory is /bucket/dir/ ) to temporarily store a processed AS2 message file, store the MDN when we receive them from the partner, and write a final JSON file containing relevant metadata of the transmission. So, the AccessRole needs to provide read and write access to the parent directory of the file location used in the StartFileTransfer request. Additionally, you need to provide read and write access to the parent directory of the files that you intend to send with StartFileTransfer .
  - LoggingRole (string) --
    
    The Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role that allows a connector to turn on CloudWatch logging for Amazon S3 events. When set, you can view connector activity in your CloudWatch logs.
  - Tags (list) --
    
    Key-value pairs that can be used to group and search for connectors.
    - (dict) --
      
      Creates a key-value pair for a specific resource. Tags are metadata that you can use to search for and group a resource for various purposes. You can apply tags to servers, users, and roles. A tag key can take more than one value. For example, to group servers for accounting purposes, you might create a tag called Group and assign the values Research and Accounting to that group.
      - Key (string) --
        
        The name assigned to the tag that you create.
      - Value (string) --
        
        Contains one or more values that you assigned to the key name you create.

UpdateConnector (updated)

Link ¶
Changes (request)

{'As2Config': {'EncryptionAlgorithm': {'NONE'}}}

Updates some of the parameters for an existing connector. Provide the ConnectorId for the connector that you want to update, along with the new values for the parameters to update.