How can I set up a private network connection between a file gateway and Amazon S3?
Last updated: 2020-03-06
I want to set up a private network connection between AWS Storage Gateway's file interface (file gateway) and Amazon Simple Storage Service (Amazon S3). I don't want my gateway to communicate with AWS services over the internet. How can I do that?
You can set up a private network connection between a file gateway and Amazon S3 within an Amazon Virtual Private Cloud (Amazon VPC). To set up this private connection within a VPC, you must:
- Create a VPC endpoint for Amazon S3.
- Create a file gateway using a VPC endpoint.
Create a VPC endpoint for Amazon S3
- Open the Amazon VPC console.
- From the navigation pane, choose Endpoints.
- Choose Create Endpoint.
- For Service category, select AWS services.
- For Service Name, select the service name that ends with s3.
- For VPC, select the VPC to use when accessing Storage Gateway.
- For Configure route tables, select the Route Table ID for your configuration.
- Choose Create endpoint.
Create a file gateway using a VPC endpoint
To create a file gateway using a VPC endpoint, you must create a VPC endpoint for Storage Gateway, create and configure a file gateway, and then activate your gateway in the VPC.
Note: For an on-premises file gateway, you must set up and configure an HTTP proxy.
Test the network connectivity
- Connect to the file gateway's Amazon Elastic Compute Cloud (Amazon EC2) host instance using SSH.
- In the SSH session, type 3 to select 3: Test Network Connectivity.
- The tests return [ PASSED ] for a successful network connection.