本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
AWS Transfer Family SFTP 連接器的安全政策
中的 SFTP 連接器安全政策 AWS Transfer Family 可讓您限制與 SFTP 連接器相關聯的一組密碼編譯演算法 （訊息驗證碼 (MACs)、金鑰交換 (KEXs) 和密碼套件）。以下是每個 SFTP 連接器安全政策支援的加密演算法清單。
注意
TransferSFTPConnectorSecurityPolicy-2024-03 是套用至 SFTP 連接器的預設安全政策。
您可以變更連接器的安全政策。從 Transfer Family 左側導覽窗格中選取連接器，然後選取您的連接器。然後在 Sftp 組態區段中選取編輯。在密碼編譯演算法選項區段中，從安全政策欄位中的下拉式清單中選擇任何可用的安全政策。
| 安全政策 | TransferSFTPConnectorSecurityPolicy-FIPS-2024-10 | TransferSFTPConnectorSecurityPolicy-2024-03 | TransferSFTPConnectorSecurityPolicy-2023-07 |
|---|---|---|---|
|
Ciphers |
|||
|
aes128-ctr |
♦ |
||
|
aes128-gcm@openssh.com |
♦ |
♦ |
♦ |
|
aes192-ctr |
♦ |
♦ |
|
|
aes256-ctr |
♦ |
♦ |
|
|
aes256-gcm@openssh.com |
♦ |
♦ |
♦ |
|
Kexs |
|||
|
curve25519-sha256 |
♦ |
♦ |
|
|
curve25519-sha256@libssh.org |
♦ |
♦ |
|
|
diffie-hellman-group14-sha1 |
♦ |
||
|
diffie-hellman-group16-sha512 |
♦ |
♦ |
|
|
diffie-hellman-group18-sha512 |
♦ |
♦ |
|
|
diffie-hellman-group-exchange-sha256 |
♦ |
♦ |
|
| ecdh-sha2-nistp256 |
♦ |
||
| ecdh-sha2-nistp384 |
♦ |
||
| ecdh-sha2-nistp521 |
♦ |
||
|
Macs |
|||
|
hmac-sha2-512-etm@openssh.com |
♦ |
♦ |
|
|
hmac-sha2-256-etm@openssh.com |
♦ |
♦ |
|
| hmac-sha2-512 |
♦ |
♦ |
♦ |
|
hmac-sha2-256 |
♦ |
♦ |
♦ |
|
hmac-sha1 |
♦ |
||
|
hmac-sha1-96 |
♦ |
||
|
Host Key Algorithms |
|||
| rsa-sha2-256 |
♦ |
♦ |
♦ |
| rsa-sha2-512 |
♦ |
♦ |
♦ |
| ecdsa-sha2-nistp256 |
♦ |
♦ |
♦ |
| ecdsa-sha2-nistp384 | ♦ |
♦ |
|
| ecdsa-sha2-nistp521 | ♦ |
♦ |
|
| ssh-rsa |
♦ |
||
