What does this AWS Solutions Implementation do?

This solution creates a web portal for your customers to access your corporate Secure Shell File Transfer Protocol (SFTP) environment. It combines the benefits of using AWS Transfer for SFTP with an intuitive web browser interface for your non-technical users.

Benefits

Provide a simple web interface

Your customers will be able to access your files without installing any software or using your system from the backend.

Avoid multi-client support

Simplify the complexities associated with installing and supporting different clients on various end user devices and operating systems. Avoid the effort of managing a commercial client and the accompanying troubleshooting.

Support common file operations

This solution supports the following file operations: upload, download, rename, and delete.

 

AWS Solutions Implementation overview

The diagram below presents the architecture you can automatically deploy using the solution's implementation guide and accompanying AWS CloudFormation template.

Web Client for AWS Transfer Family | Architecture Diagram
 Click to enlarge

Web Client for AWS Transfer Family Solutions Implementation architecture

The AWS CloudFormation template deploys the following infrastructure:

1. An Amazon CloudFront distribution to serve the solution’s web application.
2. An Amazon Simple Storage Service (Amazon S3) bucket configured for static website hosting.
3. A dedicated Amazon Virtual Private Cloud (Amazon VPC) with three private and three public subnets spread across three availability zones.
4. An Elastic Load Balancing Application Load Balancer that supports APIs for all file and folder operations.
5. Amazon Elastic Container Service (Amazon ECS) containers running on AWS Fargate in the three private subnets.
6. VPC Endpoints for secure access to various services from Fargate containers.
7. An AWS Transfer Family SFTP server to provide an SFTP endpoint for file transfers. 
8. An Amazon API Gateway API to query Amazon Cognito and validate the end user’s credentials.
9. An AWS Lambda function to support the API Gateway with authentication.
10. An Amazon Cognito user pool to manage user access to the web application and for custom authentication with AWS Transfer Family.
11. Amazon DynamoDB is used to store logical directory path mapping for the AWS Transfer for SFTP server.
12. An Amazon S3 bucket for storing the data for the AWS Transfer for SFTP server.
 

 

Web Client for AWS Transfer Family

Version 1.0.0
Release date: 10/2021
Author: AWS

Estimated deployment time: 60 min

Estimated cost Source code 
Did this Solutions Implementation help you?
Provide feedback 
Build icon
Deploy a Solution yourself

Browse our library of AWS Solutions Implementations to get answers to common architectural problems.

Learn more 
Find an APN partner
Find an APN Partner

Find AWS certified consulting and technology partners to help you get started.

Learn more 
Explore icon
Explore Solutions Consulting Offers

Browse our portfolio of Consulting Offers to get AWS-vetted help with solution deployment.

Learn more