Live data from Hacker News

AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

aws.amazon.com

31–40 of 158 posts

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#32
post #27

Ah this would've been so useful 18 months ago. I had to spend MONTHS to convince a vendor (government) to use S3 to upload (keybase-encrypted) files instead of SFTP. And they finally budged. This would've been so much easier.

One can also implement SFTP on top of anyting just like HTTP apis if you make your own backend, e.g. https://github.com/pkg/sftp

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#34
post #4

We currently pay $250/month through some small vendor for hipaa compliant sftp hosting (that we transfer a whopping 50kb on a weekly basis). I always felt like it was a rip off, but azure/aws didn't have their own version. And I'm loathe to manage a VM. PaaS is my sugar bear. My eyes lit up when I saw this. We're an azure shop, but I'm not afraid to use AWS for limited cases. Then I saw - $.30/hr (so, $214/mo). Reall…

Couldn't you use an Azure webapp? It has FTP and user management, though not as granular as this. You should be able to use IAM to only allow the user access to that one web app and they can set their own username/password. Not quite as simple as sending out creds from one interface, but it's an option. Not sure how many users you have, obviously if you had tons and tons of users it would become a choir, but if it's…

It’s using S3. S3 already has access logs - off by default - and for logins you have CloudTrail.

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#35

Earlier quoted context omitted.

I don't work on the S3 team so I can't answer all these questions but relative to the "2 million operations on S3" question I can point out that S3 now has batch operation support: https://aws.amazon.com/about-aws/whats-new/2018/11/s3-batch-...

I think the point being that when a filesystem the mv is atomic and just updates an inode but on S3 those operations can take place on thousand of different machines.

SFTP is not a filesystem, though; to get a rename to be atomic, you must pass SSH_FXF_RENAME_ATOMIC, and the server can return SSH_FX_OP_UNSUPPORTED.

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#36
post #3

There are a handful of services out there that do this, I know because I've needed it on multiple occasions. It's nice that Amazon is providing it in house now, but it just reminds of me the last time I went to re:invent and walked through the vendor area and thought about how many of these companies are four dev cycles away from Amazon producing a baked in competitor. Hard to make a B To B Amazon tool these days.

That’s quite literally AWS’s playbook. Fill the vendor hall with tech, learn it, see what sticks and then crush it.

This is why I’m bullish on cloud agnostic tech. These practices don’t typically fair well in the enterprise space. This is why companies like MSFT are interesting to me. They partner and rarely kill. Amazon is the complete opposite.

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#37
An alternative to doing file based SFTP is to just treat SFTP like an API.

A company I work for implemented an SFTP service where every operation simply translates to some SQL DB lookup. And a file download kicks off a larger SQL query and generates the report on the fly, streaming the result straight through to the SFTP client.

Works great! SFTP can be an API just like HTTP. Under the hood the protocol is reasonably contained and doesn't require a filesystem backend at all.

Depends a lot on the usecase of course.

See https://github.com/pkg/sftp

Re: AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3

#39
post #3

There are a handful of services out there that do this, I know because I've needed it on multiple occasions. It's nice that Amazon is providing it in house now, but it just reminds of me the last time I went to re:invent and walked through the vendor area and thought about how many of these companies are four dev cycles away from Amazon producing a baked in competitor. Hard to make a B To B Amazon tool these days.

That’s quite literally AWS’s playbook. Fill the vendor hall with tech, learn it, see what sticks and then crush it. This is why I’m bullish on cloud agnostic tech. These practices don’t typically fair well in the enterprise space. This is why companies like MSFT are interesting to me. They partner and rarely kill. Amazon is the complete opposite.

You can't even sell merchandise on Amazon without significant risk they will like your numbers enough to muscle you out:

https://www.amazon.com/AmazonBasics/b?node=10112675011

Post reply on HN