AWS Transfer or S3 VPC Interface EndPoint

Question

I have a requirement to SFTP ".csv" files from corporate on-premise linux box to S3 bucket.

The Current Setup is as follows:

1. The on-premise linux box is NOT connected to internet.
2. Corporate Network is connected with AWS with Direct Connect.
3. There are several VPCs for different purposes. Only One VPC has IGW and Public Subnet (to accept requests coming from Public Internet), all other VPCs do not have IGW and Public Subnets.
4. Corporate Network and several AWS VPCs (those having no IGW) are connected with each other through Transit Gateway.

Can someone please advise whether I should use AWS Transfer or S3 VPC Interface Endpoints to transfer files to S3 bucket from on-premise (corporate network)? and why?

I appreciate your valuable advise in advance.

Answer 1

You should Create a server endpoint that can be accessed only within your VPC - AWS Transfer Family.

Note that this is a special endpoint for AWS Transfer. It is not an endpoint for Amazon S3.

Alternatively, you could run an SFTP server on an Amazon EC2 instance, as long as the instance also has access to Amazon S3 to upload the files received.

Of course, I'd also recommend avoiding SFTP altogether and upload directly to Amazon S3 if it is at al possible. Using SFTP adds complexity and expense that is best avoided.