Return to Answer

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

If you follow correctly these instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

1. Let's install openSSH

sudo apt-get install openssh-server

2. You need to create a specific group where you will jail the users.

sudo groupadd sftpusers

3. Edit /etc/ssh/sshd_config using vim or nano
   Comment out #Subsystem sftp /usr/lib/openssh/sftp-server
   Then instead, add Subsystem sftp internal-sftp to allow SFTP connections into your server
   Lastly, at the end of the file specify the new group configurations

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

4. At this point your /etc/ssh/sshd_config should look like:

(...)

#Subsystem sftp /usr/lib/openssh/sftp-server

(...)

Subsystem sftp internal-sftp

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

5. You need to restart the ssh service to apply the changes.

sudo service ssh restart

6. Now you should be set-up to create a new user.
   Follow the different instructions of the command below and input the user password.

sudo adduser user1

7. Let's add our new user to the sftp group we created earlier.

sudo usermod -g sftpusers user1
sudo usermod -s /bin/nologin user1

8. At this point, the last thing we need to do is jail our user inside the /home/<user> directory.

sudo chown root:user1 /home/user1
sudo chmod 755 /home/user1

You can create new folders that belongs to the user using

sudo mkdir /home/user1/new_folder
sudo chown user1:user1 /home/user1/new_folder
sudo chmod 755 /home/user1/new_folder

I created this repo few days ago that automate this process: https://github.com/smallwat3r/manage-jailed-sftp-users

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

If you follow correctly these instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

1. Let's install openSSH

sudo apt-get install openssh-server

2. You need to create a specific group where you will jail the users.

sudo groupadd sftpusers

3. Edit /etc/ssh/sshd_config using vim or nano
   Comment out #Subsystem sftp /usr/lib/openssh/sftp-server
   Then instead, add Subsystem sftp internal-sftp to allow SFTP connections into your server
   Lastly, at the end of the file specify the new group configurations

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

4. At this point your /etc/ssh/sshd_config should look like:

(...)

#Subsystem sftp /usr/lib/openssh/sftp-server

(...)

Subsystem sftp internal-sftp

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

5. You need to restart the ssh service to apply the changes.

sudo service ssh restart

6. Now you should be set-up to create a new user.
   Follow the different instructions of the command below and input the user password.

sudo adduser user1

7. Let's add our new user to the sftp group we created earlier.

sudo usermod -g sftpusers user1
sudo usermod -s /bin/nologin user1

8. At this point, the last thing we need to do is jail our user inside the /home/<user> directory.

sudo chown root:user1 /home/user1
sudo chmod 755 /home/user1

You can create new folders that belongs to the user using

sudo mkdir /home/user1/new_folder
sudo chown user1:user1 /home/user1/new_folder
sudo chmod 755 /home/user1/new_folder

I created this repo few days ago that automate this process

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

If you follow correctly these instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

1. Let's install vsftpd

sudo apt-get install vsftpd

2. You need to create a specific group where you will jail the users.

sudo groupadd sftpusers

3. Edit /etc/ssh/sshd_config using vim or nano
   Comment out #Subsystem sftp /usr/lib/openssh/sftp-server
   Then instead, add Subsystem sftp internal-sftp to allow SFTP connections into your server
   Lastly, at the end of the file specify the new group configurations

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

4. At this point your /etc/ssh/sshd_config should look like:

(...)

#Subsystem sftp /usr/lib/openssh/sftp-server

(...)

Subsystem sftp internal-sftp

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

5. You need to restart the ssh service to apply the changes.

sudo service ssh restart

6. Now you should be set-up to create a new user.
   Follow the different instructions of the command below and input the user password.

sudo adduser user1

7. Let's add our new user to the sftp group we created earlier.

sudo usermod -g sftpusers user1
sudo usermod -s /bin/nologin user1

8. At this point, the last thing we need to do is jail our user inside the /home/<user> directory.

sudo chown root:user1 /home/user1
sudo chmod 755 /home/user1

You can create new folders that belongs to the user using

sudo mkdir /home/user1/new_folder
sudo chown user1:user1 /home/user1/new_folder
sudo chmod 755 /home/user1/new_folder

I created this repo few days ago that automate this process: https://github.com/smallwat3r/manage-jailed-sftp-users

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

If you follow correctly these instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

1. Let's install openSSH

sudo apt-get install openssh-server

2. You need to create a specific group where you will jail the users.

sudo groupadd sftpusers

3. Edit /etc/ssh/sshd_config using vim or nano
   Comment out #Subsystem sftp /usr/lib/openssh/sftp-server
   Then instead, add Subsystem sftp internal-sftp to allow SFTP connections into your server
   Lastly, at the end of the file specify the new group configurations

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

4. At this point your /etc/ssh/sshd_config should look like:

(...)

#Subsystem sftp /usr/lib/openssh/sftp-server

(...)

Subsystem sftp internal-sftp

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

5. You need to restart the ssh service to apply the changes.

sudo service ssh restart

6. Now you should be set-up to create a new user.
   Follow the different instructions of the command below and input the user password.

sudo adduser user1

7. Let's add our new user to the sftp group we created earlier.

sudo usermod -g sftpusers user1
sudo usermod -s /bin/nologin user1

8. At this point, the last thing we need to do is jail our user inside the /home/<user> directory.

sudo chown root:user1 /home/user1
sudo chmod 755 /home/user1

You can create new folders that belongs to the user using

sudo mkdir /home/user1/new_folder
sudo chown user1:user1 /home/user1/new_folder
sudo chmod 755 /home/user1/new_folder

I created this repo few days ago that automate this process: https://github.com/smallwat3r/manage-jailed-sftp-users

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

I created this repo few days ago that automate this process: https://github.com/smallwat3r/manage-jailed-sftp-users

If you follow correctly the README instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

If you don't want to use AWS Transfer for SFTP, it is possible to set up your SFTP server directly from an EC2 instance.

If you follow correctly these instructions you should be able to create your SFTP users quite easily. In my specific case I used a micro T2 instance with Ubuntu 18.04

1. Let's install vsftpd

sudo apt-get install vsftpd

2. You need to create a specific group where you will jail the users.

sudo groupadd sftpusers

3. Edit /etc/ssh/sshd_config using vim or nano
   Comment out #Subsystem sftp /usr/lib/openssh/sftp-server
   Then instead, add Subsystem sftp internal-sftp to allow SFTP connections into your server
   Lastly, at the end of the file specify the new group configurations

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

4. At this point your /etc/ssh/sshd_config should look like:

(...)

#Subsystem sftp /usr/lib/openssh/sftp-server

(...)

Subsystem sftp internal-sftp

Match group sftpusers
        ChrootDirectory %h
        X11Forwarding no
        AllowTcpForwarding no
        ForceCommand internal-sftp
        PasswordAuthentication yes

5. You need to restart the ssh service to apply the changes.

sudo service ssh restart

6. Now you should be set-up to create a new user.
   Follow the different instructions of the command below and input the user password.

sudo adduser user1

7. Let's add our new user to the sftp group we created earlier.

sudo usermod -g sftpusers user1
sudo usermod -s /bin/nologin user1

8. At this point, the last thing we need to do is jail our user inside the /home/<user> directory.

sudo chown root:user1 /home/user1
sudo chmod 755 /home/user1

You can create new folders that belongs to the user using

sudo mkdir /home/user1/new_folder
sudo chown user1:user1 /home/user1/new_folder
sudo chmod 755 /home/user1/new_folder

I created this repo few days ago that automate this process: https://github.com/smallwat3r/manage-jailed-sftp-users