SFTP Support für AWS Security Policy 2023-05

Idea review. Thank you for taking the time to raise this suggestion. The AWS security policy referred to in the suggestion describes several different kinds of control that can be applied to SFTP traffic, including selections for SSH ciphers, Key Exchange Algorithms, MACs (Message Authentication Code) and TLS ciphers. The ACE equivalents to these kind of configurations are split in two different locations. The definition of an FTP Server policy (defined within a policy project and then associated with one or more message flows at runtime) provides for configuration of SSH/TLS Encryption ciphers and Message Authentication code. Key exchange algorithms can be provided by JVM properties such as -Djsch.key=""curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521". In order to make these externals clearer for those familiar with AWS security policies, we could potentially add one or more "AWS Templates" (perhaps one for each version of the AWS security policy) to the FTP Server policy. This would be a relatively small and easy change to the product externals but would also first of all require us to move configuration of key exchanges into the FTP Server policy. The status of the idea is moved to Future Consideration.