的安全性原則 AWS Transfer Family

中的伺服器安全性原則可 AWS Transfer Family 讓您限制與伺服器相關聯的一組加密演算法 (訊息驗證碼 (MAC)、金鑰交換 (KEX) 和密碼套件)。如需支援的加密演算法清單，請參閱加密算法。如需與伺服器主機金鑰和服務管理的使用者金鑰搭配使用的支援金鑰演算法清單，請參閱支援的使用者和伺服器金鑰演算法。

注意

我們強烈建議您將伺服器更新為我們最新的安全政策。我們最新的安全性原則為預設值。任何使用 CloudFormation並接受預設安全性原則建立 Transfer Family 伺服器的客戶，都會自動指派最新策略。如果您擔心客戶端的兼容性，請確認說明您在創建或更新服務器時希望使用哪種安全策略，而不是使用默認策略，這可能會更改。

若要變更伺服器的安全性原則，請參閱編輯安全性原則。

如需 Transfer Family 中安全性的詳細資訊，請參閱部落格文章：Transfer Family 如何協助您建置安全、合規的受管理檔案傳輸解決方案。

注意

TransferSecurityPolicy-2024-01是使用主控台、API 或 CLI 建立伺服器時，附加到伺服器的預設安全性原則。

加密算法

對於主機金鑰，我們支援下列演算法：

• rsa-sha-256

• rsa-sha-512

• ecdsa-sha2-nistp256

• ecdsa-sha2-nistp384

• ecdsa-sha2-nistp512

• ssh-ed25519

此外，2018 年和 2020 年的安全政策允許ssh-rsa。

注意

請務必瞭解 RSA 金鑰類型 (永遠ssh-rsa是) 和 RSA 主機金鑰演算法 (可以是任何支援的演算法) 之間的區別。

以下是每個安全性原則所支援的密碼編譯演算法清單。

注意

在下表和原則中，請注意下列演算法類型的使用方式。

• SFTP 伺服器僅使用、和SshMacs區段SshCiphers中SshKexs的演算法。

• FTPS 伺服器僅使用TlsCiphers本節中的演算法。

• FTP 伺服器不使用加密，因此請勿使用任何這些演算法。

安全政策	2024-01	2023-05	2022-03	2020-06	FIPS-01	菲的同位	飛行器	2018-11
SshCiphers
中心	♦			♦	♦		♦	♦
[e-mail]	♦	♦	♦	♦	♦	♦	♦	♦
中心	♦	♦	♦	♦	♦	♦	♦	♦
中心	♦	♦	♦	♦	♦	♦	♦	♦
[e-mail]	♦	♦	♦	♦	♦	♦	♦	♦
[e-mail]				♦				♦
SshKexs
曲線	♦	♦	♦					♦
[e-mail]	♦	♦	♦					♦
diffie-hellman-group十四人								♦
diffie-hellman-group14-SHA256				♦			♦	♦
diffie-hellman-group沙	♦	♦	♦	♦	♦	♦	♦	♦
diffie-hellman-group沙 512	♦	♦	♦	♦	♦	♦	♦	♦
diffie-hellman-group-exchange-SHA256		♦	♦	♦		♦	♦	♦
[e-mail]	♦				♦
[e-mail]	♦				♦
[e-mail]	♦				♦
埃克德什-沙 2-尼斯特 P256	♦			♦	♦		♦	♦
埃克德什-沙 2-尼斯特 P384	♦			♦	♦		♦	♦
埃克德什-沙 2-尼斯特 P521	♦			♦	♦		♦	♦
[e-mail]	♦
SshMacs
哈馬克沙 1								♦
[e-mail]								♦
哈馬克沙 2-256			♦	♦			♦	♦
[e-mail]	♦	♦	♦	♦	♦	♦	♦	♦
哈馬克沙 2-512			♦	♦			♦	♦
[e-mail]	♦	♦	♦	♦	♦	♦	♦	♦
[e-mail]				♦				♦
[e-mail]				♦				♦
[e-mail]								♦
[e-mail]								♦
TlsCiphers
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384	♦	♦	♦	♦	♦	♦	♦	♦
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384	♦	♦	♦	♦	♦	♦	♦	♦
TLS_RSA_WITH_AES_128_CBC_SHA256								♦
TLS_RSA_WITH_AES_256_CBC_SHA256								♦

TransferSecurityPolicy-2024-01

以下顯示了 TransferSecurityPolicy -2024-01 安全性原則。

{
    "SecurityPolicy": {
        "Fips": false,
        "SecurityPolicyName": "TransferSecurityPolicy-2024-01",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes128-ctr",
            "aes256-ctr",
            "aes192-ctr"
        ],
        "SshKexs": [
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "curve25519-sha256",
            "[e-mail]",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group-exchange-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}

TransferSecurityPolicy-2023-05

以下顯示了 TransferSecurityPolicy -2023-05 安全性原則。

{
    "SecurityPolicy": {
        "Fips": false,
        "SecurityPolicyName": "TransferSecurityPolicy-2023-05",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes256-ctr",
            "aes192-ctr"
        ],
        "SshKexs": [
            "curve25519-sha256",
            "[e-mail]",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group-exchange-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}

TransferSecurityPolicy-2022-03

以下顯示了 TransferSecurityPolicy -2022-03 安全性原則。

{
  "SecurityPolicy": {
    "Fips": false,
    "SecurityPolicyName": "TransferSecurityPolicy-2022-03",
    "SshCiphers": [
      "[e-mail]",
      "[e-mail]",
      "aes256-ctr",
      "aes192-ctr"
    ],
    "SshKexs": [
      "curve25519-sha256",
      "[e-mail]",
      "diffie-hellman-group16-sha512",
      "diffie-hellman-group18-sha512",
      "diffie-hellman-group-exchange-sha256"
    ],
    "SshMacs": [
      "[e-mail]",
      "[e-mail]",
      "hmac-sha2-512",
      "hmac-sha2-256"
    ],
    "TlsCiphers": [
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", 
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", 
      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", 
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", 
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", 
      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", 
      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    ]
  }
}

TransferSecurityPolicy-2020-06

下面顯示了 TransferSecurityPolicy -2020 年 06 月的安全性原則。

{
  "SecurityPolicy": {
    "Fips": false,
    "SecurityPolicyName": "TransferSecurityPolicy-2020-06",
    "SshCiphers": [
      "[e-mail]",
      "aes128-ctr",
      "aes192-ctr",
      "aes256-ctr",
      "[e-mail]",
      "[e-mail]"
    ],
    "SshKexs": [
      "ecdh-sha2-nistp256",
      "ecdh-sha2-nistp384",
      "ecdh-sha2-nistp521",
      "diffie-hellman-group-exchange-sha256",
      "diffie-hellman-group16-sha512",
      "diffie-hellman-group18-sha512",
      "diffie-hellman-group14-sha256"
    ],
    "SshMacs": [
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "hmac-sha2-256",
      "hmac-sha2-512"
    ],
    "TlsCiphers": [
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    ]
  }
}

TransferSecurityPolicy-2018-11

下面顯示了 TransferSecurityPolicy -2018-11 安全性原則。

{
  "SecurityPolicy": {
    "Fips": false,
    "SecurityPolicyName": "TransferSecurityPolicy-2018-11",
    "SshCiphers": [
      "[e-mail]",
      "aes128-ctr",
      "aes192-ctr",
      "aes256-ctr",
      "[e-mail]",
      "[e-mail]"
    ],
    "SshKexs": [
      "curve25519-sha256",
      "[e-mail]",
      "ecdh-sha2-nistp256",
      "ecdh-sha2-nistp384",
      "ecdh-sha2-nistp521",
      "diffie-hellman-group-exchange-sha256",
      "diffie-hellman-group16-sha512",
      "diffie-hellman-group18-sha512",
      "diffie-hellman-group14-sha256",
      "diffie-hellman-group14-sha1"
    ],
    "SshMacs": [
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "[e-mail]",
      "hmac-sha2-256",
      "hmac-sha2-512",
      "hmac-sha1"
    ],
    "TlsCiphers": [
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
      "TLS_RSA_WITH_AES_128_CBC_SHA256",
      "TLS_RSA_WITH_AES_256_CBC_SHA256"
    ]
  }
}

TransferSecurityPolicy-FIPS-01

下面顯示了 TransferSecurityPolicy安全性原則。

注意

FIPS 服務端點和 TransferSecurityPolicy-FIPS-2024-01 安全性原則僅適用於某些地區。 AWS 如需詳細資訊，請參閱 AWS 一般參考 中的 AWS Transfer Family 端點和配額。

{
    "SecurityPolicy": {
        "Fips": true,
        "SecurityPolicyName": "TransferSecurityPolicy-FIPS-2024-01",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes128-ctr",
            "aes256-ctr",
            "aes192-ctr"
        ],
        "SshKexs": [
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group-exchange-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}

TransferSecurityPolicy-FIPS-05

的 FIPS 認證詳細資訊可在 AWS Transfer Family 以下位置找到：https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search/all

下面顯示了 TransferSecurityPolicy安全性原則。

注意

FIPS 服務端點和 TransferSecurityPolicy-FIPS-2023-05 安全性原則僅適用於某些地區。 AWS 如需詳細資訊，請參閱 AWS 一般參考 中的 AWS Transfer Family 端點和配額。

{
    "SecurityPolicy": {
        "Fips": true,
        "SecurityPolicyName": "TransferSecurityPolicy-FIPS-2023-05",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes256-ctr",
            "aes192-ctr"
        ],
        "SshKexs": [
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group-exchange-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}

TransferSecurityPolicy-飛機

的 FIPS 認證詳細資訊可在 AWS Transfer Family 以下位置找到：https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search/all

以下顯示了 TransferSecurityPolicy安全性原則。

注意

FIPS 服務端點和 TransferSecurityPolicy-FIPS-2020-06 安全性原則僅適用於部分地區。 AWS 如需詳細資訊，請參閱 AWS 一般參考 中的 AWS Transfer Family 端點和配額。

{
  "SecurityPolicy": {
    "Fips": true,
    "SecurityPolicyName": "TransferSecurityPolicy-FIPS-2020-06",
    "SshCiphers": [
      "aes128-ctr",
      "aes192-ctr",
      "aes256-ctr",
      "[e-mail]",
      "[e-mail]"
    ],
    "SshKexs": [
      "ecdh-sha2-nistp256",
      "ecdh-sha2-nistp384",
      "ecdh-sha2-nistp521",
      "diffie-hellman-group-exchange-sha256",
      "diffie-hellman-group16-sha512",
      "diffie-hellman-group18-sha512",
      "diffie-hellman-group14-sha256"
    ],
    "SshMacs": [
      "[e-mail]",
      "[e-mail]",
      "hmac-sha2-256",
      "hmac-sha2-512"
    ],
    "TlsCiphers": [
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    ]
  }
}

後量子安全性原則

下表列出 Transfer Family 列後量子安全性原則的演算法。這些政策在中詳細描述。使用混合式後量子金鑰交換 AWS Transfer Family

政策清單會跟隨下表格。

安全政策	TransferSecurityPolicy-PS-實驗分析 -2023-04	TransferSecurityPolicy-P-SSH-菲普斯-實驗 -2023-04
SSH ciphers
中心		♦
[e-mail]	♦	♦
中心	♦	♦
中心	♦	♦
[e-mail]	♦	♦
KEXs
[e-mail]	♦	♦
[e-mail]	♦	♦
[e-mail]	♦	♦
[e-mail]	♦
diffie-hellman-group14-SHA256		♦
diffie-hellman-group沙	♦	♦
diffie-hellman-group沙 512	♦	♦
埃克德什-沙 2-尼斯特 P384		♦
埃克德什-沙 2-尼斯特 P521		♦
diffie-hellman-group-exchange-SHA256	♦	♦
埃克德什-沙 2-尼斯特 P256		♦
[e-mail]	♦
曲線	♦
MACs
[e-mail]	♦	♦
哈馬克沙 2-256	♦	♦
[e-mail]	♦	♦
哈馬克沙 2-512	♦	♦
TLS ciphers
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	♦	♦
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	♦	♦
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	♦	♦
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	♦	♦
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384	♦	♦
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384	♦	♦

TransferSecurityPolicy-PS-實驗分析 -2023-04

下面顯示了 TransferSecurityPolicy-PQ-SSH 實驗 -2023-04 安全性原則。

{
    "SecurityPolicy": {
        "Fips": false,
        "SecurityPolicyName": "TransferSecurityPolicy-PQ-SSH-Experimental-2023-04",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes256-ctr",
            "aes192-ctr"
        ],
        "SshKexs": [
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "curve25519-sha256",
            "[e-mail]",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group-exchange-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]",
            "hmac-sha2-512",
            "hmac-sha2-256"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}

TransferSecurityPolicy-P-SSH-菲普斯-實驗 -2023-04

下面顯示了-PQ-SSH-菲 TransferSecurityPolicy普斯實驗 -2023-04 安全策略。

{
    "SecurityPolicy": {
        "Fips": true,
        "SecurityPolicyName": "TransferSecurityPolicy-PQ-SSH-FIPS-Experimental-2023-04",
        "SshCiphers": [
            "[e-mail]",
            "[e-mail]",
            "aes256-ctr",
            "aes192-ctr",
            "aes128-ctr"
        ],
        "SshKexs": [
            "[e-mail]",
            "[e-mail]",
            "[e-mail]",
            "ecdh-sha2-nistp256",
            "ecdh-sha2-nistp384",
            "ecdh-sha2-nistp521",
            "diffie-hellman-group-exchange-sha256",
            "diffie-hellman-group16-sha512",
            "diffie-hellman-group18-sha512",
            "diffie-hellman-group14-sha256"
        ],
        "SshMacs": [
            "[e-mail]",
            "[e-mail]",
            "hmac-sha2-512",
            "hmac-sha2-256"
        ],
        "TlsCiphers": [
            "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
            "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
            "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
        ]
    }
}