Easy SFTP Setup with AWS Transfer Family - Step by Step Tutorial

[@user-mm4lf8hu4p]

to the point and cover all the things perfect

[@josuedr4528]

2022: When creating a role it will ask you for an use case, there's gonna be two radio buttons; ec2 and lambda. Below them there's a dropdown for "use case for other aws services" in there select "Transfer" and that's how i got it working, the policies remained the same as in the video AWS seems kind of complex and this doesn't guarantee it will work for you but i wanted to post what worked for me in case you land in a similar scenario

[@Ruab]

Having an issue assuming the user role when authenticating. Not sure if something changed in regards to the IAM polices that need to be assigned...and of course my company doesn't have any AWS contracts so I can't contact AWS to see what's up. Lovely

[@piekutter]

Excellent tutorial. Instructions and your voice are clear. Thank you so much!

[@jedi4z]

Thanks dude! 🎉

[@anisahmednacer5410]

Excellent tutorial. Thanks

[@datasleek7950]

Thank you for producing this. Very useful.

[@artofthesystem4419]

Fantastic tutorial!! Thank you so much!!

[@EGlobalKnowledge]

Instructions are very clear. Thank you for the video

[@soumitra-kayal]

Excellent tutorial. Keep it up. Thanks.

[@RohitSyd]

Super well explained video. Thanks.

[@alimomeni4777]

Thank you very much for this Enrico!

[@LosVideosWenos]

Great tut... thanks... instrucions are clear and easy to follow.

[@HugoGonzalez-rg4gz]

thank u Enrico! your tutorial was really helpful

[@ruslankovalov8292]

hi! thanks for this video! A lot :) I had to do this SFTP stuff using Terraform, and it makes no sense to use Terraform till you know what has to be done in the cloud, so this video made some sense!

[@ADV-IT]

Thanks!

[@solvenium5109]

This tutorial was very helpful! Thank you so much!

[@GUTIECUADOR]

Muchas gracias por tu aporte. Sigue asi, me has ayudado mucho. Un saludo desde Ecuador!!!

[@dreamking893]

Excellent video, this will save me a lot of time!

[@IvanMusaelyan]

Genial!

[@rickam9055]

Amazing man!

[@user-zm4kv4ww9x]

Thanks for the video. Your video and explanation are good but the volume needs to be increased.

[@ginastavropoulou6005]

If you auto-generate a policy then what is the point of creating one before? When I try to Auto-generate I get an error "Failed to edit user details (${transfer:Home*} variable used in policy for a user with a logical home directory)"

[@EnricoPortolan]

Thanks for the comment. There are two different roles needed: one for the SFTP server to access the S3 bucket and one to scope-down the policy

[@EnricoPortolan]

I think you are getting that error because the SFTP service has been updated to support chroot and logical directory. You don't need to create the user policy anymore. More information here: aws.amazon.com/blogs/storage/simplify-your-aws-sftp-structure-with-chroot-and-logical-directories/

[@abe_duarte]

@@EnricoPortolan I just used policy none and created the user correctly, going to test it out.

[@rafaelmello5725]

Nice and clear. Thank you!

[@IvelWonderwood]

That was very useful, ty.

[@jrodrig9212]

Very helpful. Thank you

[@rodneykahane4994]

great tutorial, thanks!

[@TheGuillemBA]

This is very helpful, thanks a lot! :)

[@matipamodisane3898]

Great video!!

[@ryanwillgues1407]

Can you explain why you didn't use a password for connecting to the server in Cyberduck? Also, I didn't see an option to create a password in AWS transfer family. Thank you.

[@__Cypher]

thanks. its was really helpfull

[@monikavaid5083]

Good one!

[@JoeyDoherty-nu2id]

Followed it all EXACT and got an Access Denied when trying to log in...

[@__Cypher]

would like to see more

[@bhutakash646]

Hey there, great video and excellent information :) Can we send files from LINUX machine to AWS S3 bucket using sftp command line thru similar setup? if yes, then could you please help me with its syntax?

[@KoljaMineralka]

I would use bucketName/folderName/* instead for the resource name for additional security

[@sarder2008]

In the SFTP server creation steps I am getting stuck, as its asking for Workflow, don't know how to fill that?

[@masayi75]

Can we use the AWS Transfer family as an ftp/transfer mechanism to move files between a 3rd party (or supplier) endpoint and an on-premise application (rather than the S3)- thinking of using the AWS ftp service as a middleware/integration layer?

[@ashah2325]

you should've posted the policy here.

[@srivatsanseetharaman1776]

I have done everything, but still get following error Couldn't stat remote file: Permission denied Is there any latency for the policy/role to get reflected in sftp or it is instant

[@nateshsharan1844]

see if the bucket is encrypted. If you follow the exact step , it should work.

[@teckcross3174]

Hey, thanks for the tutorial. I've got a question for you, I used route 53 to set up a custom hostname, but when I use this custom name instead of the endpoint in filezilla the connection is refused because the host does not exist. Any idea what I am missing? Thanks!

[@EnricoPortolan]

you need to add a CNAME. More info: docs.aws.amazon.com/transfer/latest/userguide/requirements-dns.html

[@teckcross3174]

@@EnricoPortolan Thank you mate, I appreciate you taking the time to help out.

[@ashah2325]

plus that link in your bio doesn't work

[@BITORrc]

I need to add the json of the policy :(

[@supertren]

7:38 connect ftp with s3

[@vaibhavjain1in]

Hi bro, can you please help me with this. It is not working for me. How can I connect with you?

[@vaibhavjain1in]

I think there was some policy issue. I copy paste the policy again from the official site and it worked fine. I now need to understand how can automate it if we want to give access to client who is going to download and upload files quite often. What would be the best practice?

[@EnricoPortolan]

I think the best practice is to ask the client to give you a public key and you create a user from Transfer Family with that public key so the client can download/upload as needed

[@vaibhavjain1in]

@@EnricoPortolan In our scenario, data and storage would be within our infrastructure. Data need to download, modified and upload to our s3 bucket.

[@ataimebenson]

Can we use only 1 SFTP Server for different/multiple File Transfer Pipelines ?

[@EnricoPortolan]

Yes of course as it’s backed by an S3 bucket

[@ataimebenson]

@@EnricoPortolan Does that mean I can use only One SFTP server with about 10 different pipelines ? Pointing to 10 different S3 buckets ?

[@emmanuelarmah8552]

How can I reach aws sftp server over the over Internet

[@EnricoPortolan]

you can set the sftp server with a public URL as shown in the video

[@Pablo-Herrero]

Good video, except for the continuous lip smacking...

[@pointbreak4300]

Hi Enrico, a noob question in here. what about the access of the customers? how are they gonna be able to transfer files? would it be via cyberduck as well?

[@EnricoPortolan]

yes exactly, cyberduck would work or any other FTP Client

[@Digitronus]

Hi, great video :-) I just follow all the steps one by one and at the end Filezilla can connect to the SFTP server but I cannot list,read,write there so the folder looks empty. Any Idea why? { "Version": "2012-10-17", "Statement": [ { "Sid": "ReadWriteS3", "Action": [ "s3:ListBucket", "s3:GetBucketLocation" ], "Effect": "Allow", "Resource": [ "arn:aws:s3:::s3bucketname" ] }, { "Effect": "Allow", "Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:DeleteObjectVersion", "s3:GetObjectVersion", "s3:GetObjectACL", "s3:PutObjectACL" ], "Resource": [ "arn:aws:s3:::s3bucketname/*" ], "Sid": "" } ] }

[@EnricoPortolan]

You have some issues on the IAM file for sure. Can you check the policy of the user you use for the SFTP connection? Also make sure you have configured the home directory when you create the SFTP user

[@Digitronus]

@@EnricoPortolan I've forgotten to setup the home directory for the user, Works fine now. so simple solution, Thanks.

[@EnricoPortolan]

@@Digitronus happy to help 🎉