AWS Transfer Family (IAM)

AWStransfernetworking

AWS Transfer Family is a secure transfer service that enables you to transfer files into and out of AWS storage services.

iamaws

docs ↗

Permissions

Actions in this service

transfer:ListServers

transfer:DescribeServer

transfer:ListUsers

transfer:DescribeUser

transfer:CreateUser

transfer:UpdateUser

transfer:StartServer

transfer:StopServer

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "transfer:ListServers", "transfer:DescribeServer", "transfer:ListUsers", "transfer:DescribeUser", "transfer:CreateUser", "transfer:UpdateUser", "transfer:StartServer", "transfer:StopServer" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid transfer:* — grants full control including delete and modify operations.

Avoid transfer:DeleteServer — can permanently delete transfer servers.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/transfer/transfer.json ↗