Introducing FTP and FTPS Support for AWS Transfer

AWS Transfer Family has expanded its capabilities with native support for FTP and FTPS protocols. Previously limited to SFTP, this update broadens how businesses can securely and reliably transfer files to and from Amazon S3 and Amazon EFS. If you’ve been wondering whether AWS could fit traditional FTP workflows without workarounds, the answer is now yes.

Why FTP and FTPS Matter for AWS Transfer

Many enterprises still rely on legacy applications and systems that communicate exclusively over FTP or FTPS. Without native support, organizations had to invest in third-party solutions, custom servers, or migration projects. AWS Transfer’s new support simplifies modernization strategies without disrupting critical file-transfer dependencies.

Key benefits include:

• Direct integration with Amazon S3 and EFS.
• No need for on-premises infrastructure.
• Built-in compliance features like data encryption and access logging.

Supported Protocols Explained

FTP (File Transfer Protocol):
FTP provides a standard way to move files but transmits data in plaintext, exposing security risks without added encryption.

FTPS (FTP Secure):
FTPS wraps FTP traffic with SSL/TLS, offering a security layer that encrypts authentication and file content.

By supporting both, AWS Transfer now caters to environments where security policies vary.

Core Features of FTP and FTPS Support

1. Fully Managed Infrastructure
AWS Transfer manages the server endpoints, scalability, and maintenance. Customers only configure user access and backend storage mappings.

2. Custom Hostnames and DNS Integration
You can customize server URLs, integrate with your existing DNS setup, and present branded endpoints to external partners.

3. Authentication Options

• Service-managed credentials (username/password).
• Integration with custom identity providers through AWS Lambda.

4. Logging and Auditing
All file activity, including uploads, downloads, and errors, is captured via AWS CloudTrail and Amazon CloudWatch.

5. Data Encryption
FTPS connections are encrypted using industry-standard TLS configurations. Data at rest remains protected through AWS-managed or customer-managed encryption keys.

How to Set Up FTP and FTPS on AWS Transfer

Setting up a server involves a few clear steps:

Step 1:
Create a new server in AWS Transfer Family. Choose FTP, FTPS, or both as supported protocols.

Step 2:
Configure identity management. Decide whether to manage user credentials internally or integrate with an external authentication system.

Step 3:
Specify the backend storage. Select an Amazon S3 bucket or EFS file system to house transferred data.

Step 4:
Customize the domain and endpoint configuration if needed, or use AWS-managed endpoints.

Step 5:
Assign user roles, configure permissions, and apply security policies such as IP allowlists or deny lists.

Step 6:
Test the server by connecting with a standard FTP or FTPS client.

Use Cases

Modernization of Legacy Workflows
Organizations with aging ERP or inventory management systems can migrate backend storage to the cloud without modifying how those systems connect.

Partner File Exchanges
B2B partners that require FTP/FTPS transfers can interface directly with your AWS environment, reducing operational overhead.

Secure Data Distribution
Controlled access combined with encryption ensures that sensitive files remain protected throughout the transfer process.

Things to Keep in Mind

• FTP transfers are unencrypted unless upgraded to FTPS.
• Server endpoints must reside within a VPC if you enable VPC-hosted endpoints.
• Pricing depends on endpoint hours, data uploads/downloads, and storage usage.

---

AWS Transfer’s support for FTP and FTPS closes a critical gap, empowering businesses to meet file-transfer needs without complexity or added risk. Whether modernizing existing systems or building new cloud-native workflows, AWS Transfer now offers a seamless bridge to trusted protocols.