Using Amazon Cognito as an identity provider with AWS Transfer Family and Amazon S3
Storage Blog
This article provides a detailed walkthrough on how to set up and configure an SFTP server using AWS Transfer Family, with Amazon Cognito as a custom identity provider and Amazon DynamoDB to store user entitlements. It enables fine-grained access control by dynamically generating session policies and logical directory mappings based on user entitlements.
Specifically, the article covers:
- Solution overview
- Prerequisites
- Walkthrough steps:
- Deploying resources using AWS CloudFormation
- Creating an AWS Transfer Family SFTP server
- Setting up the custom identity provider (Amazon Cognito and Lambda)
- Testing the SFTP server with different user entitlements
- Cleaning up resources
The article concludes by highlighting the benefits of using AWS Transfer Family for secure and scalable file transfer solutions, and provides links to relevant documentation and resources.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
2024
2024
2025
2025
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.