本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
Amazon Transfer Family SFTP 连接器的安全策略
中的 SFTP 连接器安全策略 Amazon Transfer Family 允许您限制与 SFTP 连接器关联的一组加密算法(消息身份验证码 (MAC)、密钥交换 (KEX) 和密码套件)。以下是每个 SFTP 连接器安全策略支持的加密算法列表。
注意
TransferSFTPConnectorSecurityPolicy-2024-03
是应用于 SFTP 连接器的默认安全策略。
安全策略 | TransfersFTP -2024-03 ConnectorSecurityPolicy | TransfersFTP -2023-07 ConnectorSecurityPolicy |
---|---|---|
Ciphers |
||
aes128-ctr |
♦ |
|
aes128-gcm@openssh.com |
♦ |
♦ |
aes192-ctr |
♦ |
♦ |
aes256-ctr |
♦ |
♦ |
aes256-gcm@openssh.com |
♦ |
♦ |
Kexs |
||
curve25519-sha256 |
♦ |
♦ |
curve25519-sha256@libssh.org |
♦ |
♦ |
diffie-hellman-group14-sha1 |
♦ |
|
diffie-hellman-group16-sha512 |
♦ |
♦ |
diffie-hellman-group18-sha512 |
♦ |
♦ |
diffie-hellman-group-exchange-sha256 |
♦ |
♦ |
Macs |
||
hmac-sha2-512-etm@openssh.com |
♦ |
♦ |
hmac-sha2-256-etm@openssh.com |
♦ |
♦ |
hmac-sha2-512 |
♦ |
♦ |
hmac-sha2-256 |
♦ |
♦ |
hmac-sha1 |
♦ |
|
hmac-sha1-96 |
♦ |
|
Host Key Algorithms |
||
rsa-sha2-256 |
♦ |
♦ |
rsa-sha2-512 |
♦ |
♦ |
ecdsa-sha2-nistp256 |
♦ |
♦ |
ecdsa-sha2-nistp384 | ♦ |
♦ |
ecdsa-sha2-nistp521 | ♦ |
♦ |
ssh-rsa |
♦ |