How Amazon Security Token Service Works

You can access S3 resources that belong to another user by using temporary credentials provided by the AWS Security Token Service (STS). This is done by assuming a role created by the granting user.

  1. In Site Manager edit your S3 entry.
  2. In the S3 tab enter:
    • Role ARN (Amazon Resource Name): this identifies the role created by the granting
      user. Your user will assume this role.
    • MFA Device Serial: your MFA (Multi-factor authentication) device identification if the
      role trust policy requires multi-factor authentication. This can be either a serial for a
      physical device or a registered ARN for a virtual device (eg an authentication app in your smartphone).

    When connecting and if the MFA device serial is configured you will be asked to provide the token code generated by the MFA device:

      FileZilla Pro

      Amazon S3 is just the start

      FileZilla Pro connects to all major cloud storage providers from a single interface — no extra software, no credential juggling. Transfer files between your local machine and the cloud exactly as you would over FTP.

      Amazon S3
      Google Drive
      Microsoft Azure
      WebDAV
      Dropbox
      OneDrive

      Get FileZilla Pro

Tags: , , ,