AWS Transfer Family updated its SFTP server host key storage to optionally use AWS Secrets Manager within the user’s AWS account. This provides enhanced control over private key material and simplifies server migration or failover by allowing reuse of host keys without changing client trust configurations.
Previously, host keys were stored within the Transfer Family service without direct user access to private keys. Now users can import or create keys in Secrets Manager, control access via IAM policies, and replicate keys across servers or regions. This capability is broadly available in supported AWS Regions.
Source & further reading
AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keys ↗Source published 2026-10-14. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.