Cyberduck Help / Howto / Amazon S3 Support

Transfer files to your ​S3 account and browse the S3 buckets and files in a hierarchical way as you are used to with other remote file systems supported by Cyberduck. For a short overview of Amazon S3, refer to the Wikipedia ​article.

Connecting to Amazon S3

You must obtain the login credentials (Access Key ID and Secret Access Key) of your Amazon Web Services ​Account from the AWS Access Identifiers ​page.

Buckets

To create a new ​bucket for your account, choose New Folder... from the File menu. You can choose the bucket location in the Preferences (either US or Europe). Note that Amazon has a different pricing scheme for the two locations. Important: Because the bucket name must be globally unique the operation might fail if the name is already taken by someone else (E.g. don't assume any common name like media or images will be available.

Due to limitations by the design of the Amazon S3 file system, you cannot create folders anywhere else than the root. You can however upload folders and these are browsable like on a regular remote server.

Access Control

Amazon S3 uses Access Control List (ACL) settings to control who may access or modify items stored in S3. By default, all buckets and objects created in S3 are accessible only to the account owner.

You must give Other read permissions for your objects in File → Info → Permissions to make them accessible using a regular web browser for everyone.

CloudFront Distribution

You can enable cloud front distribution using File → Info → Distribution. You must ​signup for Amazon CloudFront first. Make sure your objects in the bucket you want to enable distribution for are world readable (in File → Info → Permissions Other must have the Read checkbox toggled on).

Hidden Options

• Create a publicly available auto-expiring signed URL. A private object stored in S3 can be made publicy available for a limited time using a signed URL. The signed URL can be used by anyone to download the object, and after a chosen time the URL will no longer work.

Set the property s3.url.public to true and choose the lifetime of the URL using s3.url.expire.seconds.

defaults write ch.sudo.cyberduck s3.url.public true

Using Edit → Copy URL for a given file will then create a signed URL.

• Multiple CNAMEs for CloudFront distribution

Using File → Info → Distribution you can enter multiple CNAMEs for your bucket distribution. These must be space delimited.