create SFTP Jason policy
Budget: $30 – $250 USD
I need to create a SFTP Jason policy that will do the following:
Access to S3
AWS SFTP provides access to specific S3 buckets and prefixes per user. Users can then use SFTP to upload, download, and delete files to and from these buckets. AWS SFTP directly uploads files to the S3 location. For SFTP clients that support partial file uploads, such as WinSCP and Filezilla, the S3 location will contain filepart files that will fire S3 events. You will then need to handle these in the S3 event listener. AWS SFTP uses MD5 hashes to verify that the files on the server make it to S3 completely, but does not verify that the file made it from the user’s machine to the server. Authentication AWS SFTP supports common user authentication systems, including MS Active Directory, LDAP, or user authentication within the service. However, this authentication needs to be setup using custom development and API Gateway endpoints. allow authentication with SSH keys. With AWS SFTP, you can use up to 10 SSH keys per user and rotate keys, but you cannot import existing host keys.
Availability and Autoscaling
figured using standard AWS techniques to monitor and respond to CloudWatch metrics to scale up and down. Server End-point Access
AWS SFTP provides a way to map domains using Route 53 and other DNS providers. It also allows specifying domain names and custom authentication via API Gateway endpoints. But AWS SFTP endpoints do not have a static IP address. So it is not possible to create firewall rules that only allow inbound traffic from specific clients or customers. Similarly, your clients’ security policies may restrict outbound internet traffic from their network. Since AWS SFTP does not have a static IP address, it is not possible for your clients to whitelist traffic to the SFTP server.
Access to S3
AWS SFTP provides access to specific S3 buckets and prefixes per user. Users can then use SFTP to upload, download, and delete files to and from these buckets. AWS SFTP directly uploads files to the S3 location. For SFTP clients that support partial file uploads, such as WinSCP and Filezilla, the S3 location will contain filepart files that will fire S3 events. You will then need to handle these in the S3 event listener. AWS SFTP uses MD5 hashes to verify that the files on the server make it to S3 completely, but does not verify that the file made it from the user’s machine to the server. Authentication AWS SFTP supports common user authentication systems, including MS Active Directory, LDAP, or user authentication within the service. However, this authentication needs to be setup using custom development and API Gateway endpoints. allow authentication with SSH keys. With AWS SFTP, you can use up to 10 SSH keys per user and rotate keys, but you cannot import existing host keys.
Availability and Autoscaling
figured using standard AWS techniques to monitor and respond to CloudWatch metrics to scale up and down. Server End-point Access
AWS SFTP provides a way to map domains using Route 53 and other DNS providers. It also allows specifying domain names and custom authentication via API Gateway endpoints. But AWS SFTP endpoints do not have a static IP address. So it is not possible to create firewall rules that only allow inbound traffic from specific clients or customers. Similarly, your clients’ security policies may restrict outbound internet traffic from their network. Since AWS SFTP does not have a static IP address, it is not possible for your clients to whitelist traffic to the SFTP server.
Related categories:
JSON