Sold by: Software Sushi
Deployed on AWS
Free Trial
Give partners a secure place to drop files without giving them a shell. A private SFTP server on Ubuntu 24.04 with key-only logins, chrooted users and one writable incoming folder. A ready transfer user lets you upload your first file within minutes.
Overview
Give partners a secure place to drop files without handing out shell access. This image runs a dedicated OpenSSH SFTP service with public-key logins only, chrooted users who have no shell, and one writable incoming folder, separate from the instance's own SSH service.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot creates the transfer user, chroot, and an Ed25519 key pair. Nothing sensitive is baked into the image. SFTP listens on 127.0.0.1:2222 only. The host SSH service is unchanged. Keep private keys out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations.
Reach it from other machines: To accept connections from other hosts, add the instance's private IP as a second ListenAddress in /opt/sushi/etc/sftp/sshd_config, validate it with sshd -t, restart the sushi-sftp service and allow TCP 2222 in the security group only from your partners' address ranges. Do not open it to 0.0.0.0/0.
Copy-paste launch kit (role, security group, run-instances and CloudFormation): https://docs.softwaresushi.com/launch-kit/ and the OpenSSH SFTP Drop Box guide: https://docs.softwaresushi.com/sftp/
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. The OpenBSD project publishes portable OpenSSH under BSD-2-Clause, BSD-3-Clause, and ISC components. Software Sushi supplies the AMI recipe, signed Ubuntu OpenSSH packages for the 9.6p1 series, a first-boot isolated transfer user, a loopback-only listener, and setup documentation without claiming upstream endorsement.
Highlights
- Signed Ubuntu OpenSSH SFTP with public-key chroot users and no shells.
- Loopback listener on 127.0.0.1:2222; the host SSH service stays unchanged.
- Bundled configuration, backup and day-2 operations documentation.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
Dimensions summary
This listing uses one pricing dimension. You pay the software charge by the hour on the t3.medium instance type while your instance runs. There are no tiers, quantities, or add-ons to choose. Pricing scales only with how many hours the instance stays running. AWS charges for EC2, EBS storage, and data transfer separately from this software fee. All files stay on the instance's root volume, since this is a single-instance file drop rather than a cluster or managed service.
Top-of-mind questions for buyers
The software runs on a single t3.medium EC2 instance. You pay the hourly software charge for every hour the instance stays running. Stopping the instance halts the software charge, though stopped instances may still accrue separate AWS storage fees for the attached volume.
The hourly fee covers the software only. AWS bills EC2 compute, EBS storage, and data transfer separately. This product is a single-instance file drop, not a cluster or managed service, so all files sit on the instance root volume, which uses billable EBS storage.
No. Billing meters only running instance-hours on the t3.medium type. You can add transfer users with the included helper script without changing the software charge. Each user is locked to its own folder, but user count does not factor into the hourly price.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
OpenSSH 9.6p1 on Ubuntu 24.04 LTS, packaged by Software Sushi. The guided demo now removes its own test upload and leaves your files in the drop box untouched. The documentation under /opt/sushi/docs is root-owned and a first-login guide appears after sudo -iu ubuntu. Connect with Session Manager, run sudo -iu ubuntu, then bash /opt/sushi/docs/demo.sh. Configure your own provider keys and models privately after launch.
Additional details
Usage instructions
- Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed. Copy-paste launch kit (role, security group, run-instances, CloudFormation): https://docs.softwaresushi.com/launch-kit/
- Connect: aws ssm start-session --target <instance-id>. You land as ssm-user; sudo -iu ubuntu switches to the ubuntu account and shows the first-login guide. After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect a final line ending in DEMO_PASSED).
- Use it: Try it on the instance: sudo sftp -P 2222 -o IdentitiesOnly=yes -o IdentityFile=/var/lib/sushi-sftp/customer/id_ed25519 transfer@127.0.0.1, then put, get and ls. Uploaded files land in /var/lib/sushi-sftp/jails/transfer/incoming/.
- Secrets and access: The transfer user's private key is /var/lib/sushi-sftp/customer/id_ed25519 (root only: sudo cat to read it). Add partner accounts and keys as described in the Configuration guide.
- Reach it from another host: SFTP listens on port 2222 on the instance only. For partners in your VPC, add the instance's private IP as a second ListenAddress in /opt/sushi/etc/sftp/sshd_config, check it with sudo sshd -t -f /opt/sushi/etc/sftp/sshd_config, run sudo systemctl restart sushi-sftp and allow TCP 2222 only from your partners' CIDR ranges. Never open it to 0.0.0.0/0. Guide: https://docs.softwaresushi.com/sftp/ . Support: info@softwaresushi.com
Support
Vendor support
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include OpenSSH project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Finds and removes Brazilian personal data (CPF, CNPJ, RG, names, addresses, phones, bank details, vehicle plates and more) from Portuguese text, inside your own AWS account, with no network access. Real-time endpoints and batch jobs over JSON Lines, CSV and plain-text files.
Paid production AMI from Software Sushi that packages NVIDIA OpenShell v0.1.2 on Ubuntu 24.04 ARM64 with hardening, first-boot identity, a local mTLS gateway and support contact.
Dropbox is one place to keep life organized and keep work moving. With more than 700 million registered users across 180 countries, we're on a mission to design a more enlightened way of working.
Dropbox is one place to keep life organized and keep work moving. With more than 700 million registered users across 180 countries, we're on a mission to design a more enlightened way of working.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.