SFTPGo allows you to securely share your files over SFTP and optionally over HTTP/S, FTP/S and WebDAV as well.

With SFTPGo you can leverage the reliability and scale of Amazon S3 (and other storage providers) for exchanging and storing files internally or with business partners using the same tools and processes you are already familiar with.

Additional features compared to the standard offer:

• Search and export audit logs from the WebAdmin UI.
• LDAP/Active Directory authentication.
• Geo-IP filtering.
• Publish events to Amazon Simple Notification Service (SNS) topics and other publish/subscribe systems such as RabbitMQ, NATS, Kafka.

Several storage backends are supported and they are configurable per-user, so you can serve a local directory for a user and an S3 bucket (or part of it) for another one.

SFTPGo also supports virtual folders, a virtual folder can use any of the supported storage backends. So you can have, for example, a user with the S3 backend mapping a Google Cloud Storage bucket (or part of it) on a specified path and an encrypted local filesystem on another one. Virtual folders can be private or shared among multiple users, for shared virtual folders you can define different quota limits for each user.

The WebClient user interface allows end users to change their credentials, browse and manage their files in the browser and setup two-factor authentication which works with Authy, Google Authenticator and other compatible apps.

Using the WebClient each authorized user can create HTTP/S links to externally share files and folders securely, by setting limits to the number of downloads/uploads, protecting the share with a password, limiting access by source IP address, setting an automatic expiration date.

Other notable features:

• REST API.
• Web based administration interface to easily manage users, groups, folders and connections.
• Integration with external identity providers via OpenID Connect.
• Simplified user administrations using groups.
• Custom workflows based on server events or schedules.
• ACME protocol is supported: you can obtain and automatically renew TLS certificates for HTTPS, WebDAV and FTPS.
• Branding: the web UIs can be customized to match your brand.
• Configurable custom commands and/or HTTP notifications on upload, pre-upload, download, pre-download, delete, pre-delete, rename, mkdir, rmdir and on user add, update and delete.
• Chroot isolation for local accounts. Cloud-based accounts can be restricted to a certain base path.
• Per-user and per-directory virtual permissions.
• Public key and password authentication. Multiple public keys per user are supported.
• Multi-factor authentication and multi-step authentication.
• Disk quota and bandwidth throttling.
• Data transfer bandwidth limits, with total limit or separate settings for uploads and downloads and overrides based on the client's IP address. Limits can be reset using the REST API.
• Per-protocol rate limiting.
• Per-user and global IP filters.
• Automatic blocklist.

Several data providers are supported, this AMI is pre-configured to use PostgreSQL. You can use any other supported data provider by changing the configuration.

Upgrading

We strongly recommend that you keep both SFTPGo and the AMI up to date to apply the latest security and bug fixes and to use the latest SFTPGo features. Using stardard system commands is enough, for example:

sudo dnf upgrade

If you are upgrading SFTPGo from a very old version, also check the SFTPGo specific upgrade docs

https://sftpgo.github.io/latest/data-provider/#upgrading