We have set up an SFTP server on AWS Transfer Family using the **Service-managed Identity Provider**, but it only supports SSH key-based authentication. Now, we need to migrate our on-prem SFTP server usernames and passwords to AWS. ### Questions: 1. **How can we configure password-based authentication** on our existing AWS Transfer Family SFTP server? 2. **Do we need to manually set up usernames and passwords** after configuring a custom identity provider? Please provide guidance on implementing this.

AWS Builder Center: Learn, Build and Connect with builders in the AWS community

AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.

AWS Transfer Family SFTP

We have set up an SFTP server on AWS Transfer Family using the Service-managed Identity Provider, but it only supports SSH key-based authentication. Now, we need to migrate our on-prem SFTP server usernames and passwords to AWS.

Questions:

How can we configure password-based authentication on our existing AWS Transfer Family SFTP server?
Do we need to manually set up usernames and passwords after configuring a custom identity provider?

Please provide guidance on implementing this.

主題: 遷移與現代化
標籤: AWS 轉移系列適用於 SFTP 的 AWS 傳輸
語言: English

vishnu

已提問 2 年前檢視次數 215 次

1 個回答

最新
最多得票
最多評論

這些答案是否有幫助？支持正確答案，以幫助社區從您的知識中受益。

You can change the authentication method for the server in the console, under the identity provider settings. You can choose "password OR public key" to be able to support password-based authentication for users needing it but use SSH keys for users able to use them.

With a custom identity provider, the users are exclusively configured in that external identity provider, such as in the DynamoDB table that the AWS-provided, Lambda-based custom identity provider uses to store user data.

專家

Leo K

已回答 2 年前

專家

Gary Mclean

已審閱 2 年前

vishnu
2 年前

So, we don't need to recreate the server for these changes, correct? Also, can we use both the SSH key and password by editing the identity provider settings?

Lastly, do we need to manually create the usernames and passwords, or is there another way to migrate the on-prem SFTP server user details to AWS?
Leo K 專家
2 年前

Yes, you should be able to change the authentication method selection without recreating the server. 2. With a custom identity provider (IdP), the passwords will be up to the IdP to manage. Typically, the answer to your question would be yes: you would generate random passwords for the users and set them in the DynamoDB table behind the custom IdP, but it's also possible to use some existing passwords or to integrate with an existing AD or other backend to use existing credentials for users.
SY 專家
2 年前
Agreed with what's been said above except you would need to recreate the server to change the IdP type.

AWS Transfer Family SFTP

Questions:

新增您的答案

相關內容