AWS Transfer for SFTP features

AWS Transfer for SFTP (AWS SFTP) is a fully managed service that enables the transfer of files directly into and out of Amazon S3 using the Secure File Transfer Protocol (SFTP)—also known as Secure Shell (SSH) File Transfer Protocol.

AWS transparently operates and manages all of the compute, storage, and other infrastructure necessary to maintain high availability and performance for your SFTP endpoint. Your SFTP endpoint is designed to be available 24 hours a day, 7 days a week, 365 days a year. You get full redundancy across multiple Availability Zones within an AWS Region.

AWS SFTP can meet the needs of your dynamic workloads with elastic compute infrastructure. Built-in autoscaling means that you never have to worry about provisioning additional resources if your data loads grow over time. You don't have to worry if workloads spike during certain hours of the day or days of the month.

AWS SFTP supports common user authentication systems, including Microsoft Active Directory and Lightweight Directory Access Protocol (LDAP). Alternatively, you can also choose to store and manage users’ credentials directly within the service. By connecting your existing identity provider to AWS SFTP, you assure that your external SFTP users continue to have the correct, secure level of access to your data resources without disruption.

Store the files you exchange in an Amazon S3 data lake so you can extract business insights faster. The key piece that makes this exchange possible is AWS SFTP’s conversion of files into objects, a process that preserves file metadata as object metadata. For example, with your files stored in Amazon S3, you can use Amazon Translate to make process documents more legible for international audiences. Or you can use Amazon Comprehend to extract relationships and insights from text files, or even use Amazon Athena to query CSV files to analyze historical data.

An intuitive user interface and API makes it simple for you to configure your SFTP endpoint and set up client access. For external users, the service supports commonly used SFTP clients such as WinSCP, FileZilla, and scripts. Users don’t have to change their behavior to continue sharing data with you in the cloud.

With AWS SFTP, you can use AWS Identity and Access Management (IAM) for security and identity management and Amazon CloudWatch for monitoring and event triggers to start post-upload processing. You can use AWS Key Management Service (AWS KMS) or Amazon S3 server-side encryption to control encryption at rest with the service. Additionally, AWS CloudTrail helps you meet compliance requirements with granular auditing of user and API activity.