SFTP to S3
Managed SFTP onto your own S3 bucket
Give the people and systems that need it secure SFTP/FTPS access to a bucket you already own. Connect your S3 (or S3-compatible) storage, create per-user logins, and they connect with an ordinary SFTP client. Your files stay in your bucket — no server to run, nothing to migrate.
Bring your own bucket · no data migration · live in minutes
The short version
Firepipe is a managed SFTP/FTPS gateway in front of your own S3 bucket. Instead of standing up and patching an SFTP server, you connect an existing bucket, hand out per-user credentials, and your users move files straight to and from S3 over plain SFTP — live in minutes, with no second copy of your files and nothing to migrate.
How it works
Three steps from an existing bucket to a fast, ready-to-use SFTP endpoint.
Connect your bucket
Point Firepipe at an existing S3 or S3-compatible bucket (such as Cloudflare R2). On S3 you grant a scoped cross-account role — no keys for us to copy or store; on R2 you paste a scoped key you can revoke anytime. Nothing to migrate.
Create SFTP users
Issue per-user credentials — password or SSH key — each jailed to a single path prefix, for the people and systems that need access. Hand out the hostname and they are ready to connect.
They connect — files land in your bucket
Users and systems connect with any standard SFTP/FTPS client. Every transfer streams straight to and from your own S3 bucket — Firepipe keeps no lasting copy of your file contents.
Why teams choose Firepipe
Your bucket, your data
Files stay in a bucket you own, on your own cloud account, and we keep no lasting copy of your file contents. On S3 we connect through a cross-account role with no long-lived keys for us to hold; on R2 and other S3-compatible stores, access is a scoped key you can revoke at any time.
Per-user access & a full audit trail
Issue credentials per user or system — password or SSH key — each jailed to a single path prefix. See who is connected, revoke anyone instantly, and export a full audit trail of every login and transfer.
Simple, metered pricing
Start free, then pay for throughput — no per-operation or per-listing fees from us. Your own S3 usage is billed by your cloud provider, directly to you.
Simple, metered pricing
Start free, then pay for throughput — no per-operation or per-listing fees from us.
Early-access pricing — these starting tiers may change. Your own cloud usage is billed by your provider, directly to you.
Frequently asked questions
What does "SFTP to S3" mean?
It means giving an Amazon S3 bucket an SFTP (or FTPS) front door, so people and systems can move files in and out of S3 with an ordinary SFTP client. S3 speaks its own API, not SFTP — Firepipe is the managed gateway that bridges the two, so you do not have to run or patch an SFTP server yourself.
Can I keep my files in my own S3 bucket?
Yes. Your files stay in your own S3 or S3-compatible bucket (such as Cloudflare R2) — we keep no lasting copy of them, and there is nothing to migrate. Firepipe is the SFTP/FTPS gateway in front of the bucket, not a place your files are moved to.
Does Firepipe support SSH keys and per-user access?
Yes. Issue per-user credentials with passwords or SSH keys, jail each user to a single path prefix, see who is connected, and revoke instantly — with a full exportable audit trail of every transfer.
Is my data safe if it stays in my bucket?
Your data stays under your own cloud account and access controls. On S3, Firepipe connects through a cross-account role with no long-lived keys for us to hold; on R2 and other S3-compatible stores, access is a scoped key, encrypted at rest, that you can revoke at any time.
What does it cost?
Firepipe starts free and at $19/mo, priced on metered throughput — no per-operation or per-listing fees. Your own S3 storage and requests are billed by AWS (or your provider) directly to you.
Add SFTP to your S3 bucket
Connect a bucket you already own and hand out a clean SFTP/FTPS endpoint in minutes — your files and your keys stay yours.
Start free