You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: protocols/s3/index.md
+43-58
Original file line number
Diff line number
Diff line change
@@ -41,7 +41,6 @@ z1
41
41
```
42
42
43
43
Transfer files to your [S3](http://aws.amazon.com/s3) account and browse the S3 buckets and files in a hierarchical way.
44
-
For a short overview of Amazon S3, refer to the [Wikipedia article](http://en.wikipedia.org/wiki/Amazon_S3).
45
44
46
45
```{contents} Content
47
46
:depth: 2
@@ -58,15 +57,12 @@ in the login prompt.
58
57
### IAM User
59
58
60
59
You can also connect using [IAM](iam.md) credentials that have the `Amazon S3 Full Access` template policy permissions
61
-
attached and optionally the `CloudFront Full Access`. Make sure you are connecting with `AWS4-HMAC-SHA256` signature
62
-
version (see above).
60
+
attached and optionally the `CloudFront Full Access`.
63
61
64
62
### Generic S3 Profiles
65
63
66
-
For use with third party S3 installations.
67
-
68
64
```{note}
69
-
Connection profiles can be installed from *Preferences → Profiles*.
65
+
Connection profiles for use with third-party S3 installations. can be installed from *Preferences → Profiles*.
70
66
```
71
67
72
68
`````{tabs}
@@ -75,84 +71,66 @@ Connection profiles can be installed from *Preferences → Profiles*.
75
71
76
72
**Authentication with signature version AWS4-HMAC-SHA256**
77
73
78
-
**HTTP**</br>
79
74
```{Important}
80
75
It is discouraged to enable this option to connect plaintext to Amazon S3.
81
76
```
82
77
83
78
If you have an S3 installation without SSL configured, you need an optional connection profile to connect using HTTP only without transport layer security. You will then have the added option S3 (HTTP) in the protocol dropdown selection in the [Connection](../../cyberduck/connection) and [Bookmark](../../cyberduck/bookmarks) panels.
84
79
85
-
The default port is `80`.
86
-
87
-
* {download}`Download<https://profiles.cyberduck.io/S3%20(HTTP).cyberduckprofile>` the *S3 (HTTP) profile* for preconfigured settings.
88
-
89
-
**HTTPS**</br>
90
-
91
-
The default port is `443`.
92
-
93
-
- {download}`Download<https://profiles.cyberduck.io/S3%20(HTTPS).cyberduckprofile>` the *S3 (HTTPS) profile* for preconfigured settings.
80
+
- {download}`Download<https://profiles.cyberduck.io/S3%20(HTTP).cyberduckprofile>` the *S3 (HTTP) profile* for preconfigured settings.
81
+
- *S3 (HTTPS) profile* bundled by default.
94
82
````
95
83
96
84
````{tab} AWS2
97
85
98
-
```{attention}
99
-
Connection profiles using legacy AWS2 signature authentication are not recommended to be used with AWS S3 as some features like _Key Management Service_ and _CloudFront configuration_ won't be supported
100
-
```
101
-
102
86
**Authentication with signature version AWS2**
103
87
104
-
An incomplete list of known providers that require the use of AWS2
105
-
- Riak Cloud Storage
106
-
- EMC Elastic Cloud Storage
107
-
108
-
**HTTP**</br>
109
-
110
-
The default port is `80`.
88
+
```{attention}
89
+
Connection profiles using legacy AWS2 signature authentication are not recommended to be used with AWS S3 as some regions and features like _Key Management Service_ and _CloudFront configuration_ are not supported.
90
+
```
111
91
112
92
- {download}`Download<https://profiles.cyberduck.io/S3%20AWS2%20Signature%20Version%20(HTTP).cyberduckprofile>` the S3 AWS2 Signature Version (HTTP) profile for preconfigured settings.
113
-
114
-
**HTTPS**</br>
115
-
116
-
The default port is `443`.
117
-
118
93
- {download}`Download<https://profiles.cyberduck.io/S3%20AWS2%20Signature%20Version%20(HTTPS).cyberduckprofile>` the S3 AWS2 Signature Version (HTTPS) profile for preconfigured settings.
119
94
120
-
121
-
122
95
````
123
-
`````
124
96
125
-
###AWS Gov Cloud
97
+
````{tab} AWS Gov Cloud
126
98
127
-
#### S3 GovCloud (US-East)
99
+
**S3 GovCloud (US-East)**
128
100
129
101
Use the endpoint `s3.us-gov-east-1.amazonaws.com` or install the connection profile
130
102
131
103
- {download}`Download<https://profiles.cyberduck.io/S3%20GovCloud%20(US-East).cyberduckprofile>` the *S3 GovCloud (
132
104
US-East) profile* for preconfigured settings.
133
105
134
-
#### S3 GovCloud (Us-West)
106
+
**S3 GovCloud (Us-West)**
135
107
136
108
Use the endpoint `s3.us-gov-west-1.amazonaws.com` or install the connection profile
137
109
138
110
- {download}`Download<https://profiles.cyberduck.io/S3%20GovCloud%20(US-East).cyberduckprofile>` the *S3 GovCloud (
139
111
US-West) profile* for preconfigured settings.
140
112
141
-
### AWS China (Beijiing)
113
+
````
142
114
143
-
Connect to the region *AWS China (Beijing)*
115
+
````{tab} AWS China (Beijing)
116
+
**Connect to the region _AWS China (Beijing)_**
144
117
145
118
- {download}`Download<https://profiles.cyberduck.io/S3%20China%20(Beijing).cyberduckprofile>` the *S3 China (Beijing)
146
119
profile* for preconfigured settings.
120
+
- {download}`Download<https://profiles.cyberduck.io/S3%20China%20(Ningxia).cyberduckprofile>` the *S3 China (Ningxia)
121
+
profile* for preconfigured settings.
147
122
148
-
### AWS Private Link
123
+
````
149
124
150
-
Connect
151
-
to [S3 interface VPC endpoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html)
the *AWS PrivateLink for Amazon S3 (VPC endpoint) profile*.
131
+
````
132
+
133
+
`````
156
134
157
135
### Connecting to a Single Bucket
158
136
@@ -168,6 +146,24 @@ You can access buckets owned by someone else if the ACL allows you to access it
168
146
No regional endpoint should be set while connecting to a single bucket. The endpoint will be determined automatically by querying the region of the bucket.
169
147
```
170
148
149
+
### Connecting using Deprecated Path Style Requests
150
+
151
+
For S3 compatible storage only supporting path style requests to reference buckets. Connect with a connection profile
152
+
disabling virtual host style requests.
153
+
154
+
- {download}`Download<https://profiles.cyberduck.io/S3%20(Deprecated%20path%20style%20requests).cyberduckprofile>` the
155
+
*S3 (Deprecated path style requests) profile* for preconfigured settings.
156
+
157
+
Alternatively set the [hidden configuration option](../../cyberduck/preferences.md#hidden-configuration-options)`s3.bucket.virtualhost.disable`
158
+
to `true`.
159
+
160
+
```{admonition} Interoperability
161
+
:class: note
162
+
163
+
Attempting to connect using the regular S3 connection profile to a server with no support for virtual host style requests will cause
164
+
the error `Cannot read container configuration` with the message _DNS is the network service that translates a server name to its Internet address. This error is most often caused by having no connection to the Internet or a misconfigured network. It can also be caused by an unresponsive DNS server or a firewall preventing access to the network._
165
+
```
166
+
171
167
### Connecting with OpenID Connect (OIDC) Identity Provider
172
168
173
169
```{important}
@@ -200,8 +196,7 @@ When connecting the user is requested to enter the Role ARN of the IAM role that
0 commit comments