Questions tagged with AWS Transfer Family

After creating a VPC, when trying to create the server, two issues come up. First, when choosing Internet Facing for access, the issue "No Address Allocation Ids are currently available." and second, "At least one subnet must be specified" pops up when the VPC is selected. However, the option to select the availability zones are all greyed out and I can't choose a subnet. I checked the VPC and there are 2 subnets already attached and the inbound/outbound rules set to all traffic. What else am I missing?lg...

Hi, I would like to host ftp server using transfer family. Able to create a server and do a test. Now, I am trying to test it from FileZilla. Where do I find the host name?lg...

[Transfer Family](https://aws.amazon.com/aws-transfer-family/) supports S3 and EFS storage targets, but a project's requirement specifies up/downloaded files be available to Windows EC2 instances via SMB (specifically a [FSx](https://aws.amazon.com/fsx/) share). I would let the EC2 instances mount the EFS volume used by Transfer Family, but [Microsoft](https://learn.microsoft.com/en-us/windows-server/storage/nfs/nfs-overview) says Windows NFS clients can only use NFSv2 or NFSv3. Since Transfer Family doesn't [natively](https://aws.amazon.com/aws-transfer-family/features/#Data_stored_natively_in_AWS_Storage_services) support FSx, is [DataSync](https://aws.amazon.com/datasync/) “between AWS storage services” the best way to support this workflow? As an added twist, we'll probably need to support both uploads (items that arrived via SFTP, consumed by the EC2 instances) and downloads (EC2 instance outputs a file, which will then be fetched by a remote user via SFTP) so we'll need to have [bidirectional](https://docs.aws.amazon.com/datasync/latest/userguide/other-use-cases.html#opposite-direction-tasks) DataSync between the EFS and FSx volumes.lg...

I am trying to troubleshoot an SFTP connection: I'm getting the error message "target machine actively refused connection". Is there somewhere I can find server logs with details about why the connection was refused. The Cloudwatch logs for transfer family seem to start only after successful login. Other connections seem to work fine, so it seems client related; Just trying to figure out what the client is doing that is causing the connection to be rejected.lg...

Hello Community, I was trying to narrow down to use one of the options to transfer files from the SFTP server to the S3 bucket, so as to help my Glue jobs because AWS Glue doesn’t support data loads from other cloud applications, File Storages. So, here I am trying to choose one, either AWS transfer Family or AWS lambda function that can connect to the remote server, and move them into the S3 bucket/folder which becomes the source of my integrations. I greatly appreciate it if you could share some insights into this scenario, and the advantages, and drawbacks of choosing one over the other. Any bottlenecks that you guys faced in using either of these services before for file transfer? Which is more cost-effective, suppose we say we have gigabytes of data(files). Thank you. Best, Tharunlg...

Is it possible to integrate a transfer family custom identity provider on account A with an API Gateway on Account B using IAM authorizer settings? And how to do it?lg...

When trying to grab the profiles from the AWS Transfer family client, it returns an error saying 'Transfer' object has no attribute 'list_profiles'. However, the same code works fine when I run it locally. It's only in AWS Lambda does it fail. I thought it might've been a permissions issue but the role has full access to Transfer Family. It also has no issues running other functions like describe_server or list_tags_for_resource so it's not like the client is somehow missing. ``` client = boto3.client(service_name = 'transfer', region_name = region) response = client.list_profiles() ``` By the way, I tested it with other profile functions like describe_profile and the same issue with the attribute not existing happens. Here's the documentation I was following: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/transfer.html#Transfer.Client.describe_profilelg...

Hi team, I have a private VPC with all private subnets, I create an sftp server: - Protocols = SFTP - Identity provider = Service managed - VPC = my private VPC - access = Internal - Domain = Amazon S3 the objective is to allow the other team from the same corporate to load files into my s3 bucket. when I finish creating the sftp server, it doesn't give me an endpoint ==> (Endpoint = '-' and Custom hostname = '_') I just want to know how the other team from the same corporate can interact with the sftp server to put files on my bucket as my sftp server is not publically accessible and I don't have an endpoint URL to give them. so how can they connect to my server to put files? can they use clients like FileZilla or putty or winSCP ... to transfer files? Thank you!lg...

AWS Transfer Family now supports up to ten host keys per SFTP server. In addition, ED25519 and ECDSA key types are now supported for server host keys. Previously, AWS Transfer Family only supported one host key per server, and only the RSA key type. These enhancements allow you to move your existing SFTP servers with multiple host keys and host key types to AWS Transfer Family. You will also be able to add and tag host keys before rotating them, giving you more control over your managed file transfer environments. Multiple host keys and host key types are supported in [all Regions where AWS Transfer Family is available](https://aws-preview.aka.amazon.com/about-aws/global-infrastructure/regional-product-services/). You can configure server host keys using the AWS Management Console, AWS Transfer Family API, or AWS Command Line Interface (CLI). To learn more about how to add multiple host keys to an SFTP server, visit our [documentation](https://docs.aws.amazon.com/transfer/latest/userguide/edit-server-config.html).lg...

I have an SFTP Transfer Family server in front of an EFS volume. I recently noticed that any new files/directories that are created are given world writeable permissions.  Is there a way to change the default permissions for uploaded files?lg...

I have deployed a Transfer Family sftp server (using an Amazon EFS ). I am having trouble configuring the user. I keep getting the error: Failed to create user (Unsupported or invalid SSH public key format) I have tried using the format according to AWS format but still, get the error. Has anyone had this issue and how did you solve it?lg...

When setting up the Transfer Family for AS2, I'm running into an error with receiving a message. After using this guide (https://docs.aws.amazon.com/transfer/latest/userguide/as2-end-to-end-example.html#as2-create-certs) to create the certificates, I tried to set up the AS2 Transfer Family AS2 to receive messages. The VPC is created and the endpoint can be reached. However, when actually sending the message, a 400 error Bad Request is returned with no other information. On the console, there's no record of data going in or out. Is there a way to view more information? Also, just to confirm, when the guide says to send public keys, that's the signing-cert.pem/encrypting-cert.pem, correct? I had that set up in the partner and there's no error but I just want to make sure that it's not an authentication issue. By the way, using this guide (https://docs.aws.amazon.com/transfer/latest/userguide/as2-end-to-end-example.html#as2-test-config), when using the link format in Step 7, I'm not able to connect. The endpoint connection is actually http://s-1234567890abcdef0.SERVER.transfer.us-east-1.amazonaws.com:5080. The link is correct in the server configuration but the guide is incorrect.lg...