The SFTP Gateway is a proxy server that provides a secure and convenient way to browse, upload and download files from Amazon EFS via the popular SFTP file transfer protocol. The gateway is able to handle thousands of concurrent users and connections on a single server due to its unique implementation.

Unlike other implementations, the SFTP Gateway for Amazon EFS has been engineered from the ground up for speed and efficiency. The SFTP server is a custom implementation that directly communicates with the EFS endpoints over a TLS encrypted TCP connection. SFTP commands are directly translated into NFS remote procedure calls. This unique design makes it possible to support thousands of concurrent user sessions. Each session can be a different user with their own distinct access permissions.

Public key and password authentication are supported. User accounts are managed centrally in the AWS Systems Manager Parameter Store, including UID, GID and root directory mappings. Refer to the resources listed below for further documentation, detailed instructions and FAQs.