On Prem FTP Client cannot connect to S3 through AWS Direct Connect Link

0

How shall my On Prem FTP Client can connect to S3 through AWS Direct Connect Link ? Have share my VPC Private endpoint of S3 to FTP Client.But still connection is not established.

Am using Private VIF in AWS Direct Connect.AWS Direct connect is able to make a connection.Link state is also up.But after that its unreachable to S3. My S3 bucket public access is blocked.Only way to communicate is through VPC endpoint.

2 Answers
1

The FTP client will not be able to connect directly to the VPC endpoint for the S3 bucket. You need to put an AWS Transfer Family FTP server in front of the S3 bucket and then connect to that https://docs.aws.amazon.com/transfer/latest/userguide/create-server-ftp.html

Note that plain, unencrypted FTP is supported for your use case (access over a Direct Connect link) that is one of very few use cases for which it is supported. Unless there is a good business reason for using FTP, it would be strongly advised to consider SFTP or FTPS https://repost.aws/knowledge-center/aws-sftp-endpoint-type

profile picture
EXPERT
Steve_M
answered 8 months ago
profile pictureAWS
EXPERT
iBehr
reviewed 8 months ago
0

What's the VPC endpoint you mentioned - is it an Interface or Gateway endpoint? You won't be able to use a Gateway endpoint from on-prem. Your choices are Public VIF or Interface endpoint over Private or Transit VIF. To use an Interface endpoint you need network connectivity to it and also resolution of the DNS name for the service to be that endpoint. For on-prem that's achieved by using a Route 53 Resolver Inbound Endpoint to delegate resolution of the S3 service name.

EXPERT
answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions