Cyberduck Mountain Duck CLI

Amazon S3 S3 for the rest of us. Browse Amazon Simple Storage Service like your harddisk. Supporting the latest and greatest additions to the S3 storage options. Define website endpoints, enable access logging, configure storage class, encryption and lifecycle (Glacier). Use Mountain Duck to mount S3 buckets to your desktop.

Documentation

Generic connection profiles for third party providers

  • Authentication with signature version AWS4-HMAC-SHA256
    • Download S3 (HTTP) connection profile for preconfigured settings
    • S3 (HTTPS) connection profile is bundled by default.
  • Authentication with signature version AWS2
    • Download S3 AWS2 Signature Version (HTTP) connection profile for preconfigured settings
    • Download S3 AWS2 Signature Version (HTTPS) connection profile for preconfigured settings
  • Amazon S3 China (Beijing) 🇨🇳

    Download AWS China (Beijing) connection profile for preconfigured settings

  • Amazon S3 China (Ningxia) 🇨🇳

    Download AWS China (Ningxia) connection profile for preconfigured settings

  • AWS GovCloud 🇺🇸

    Download AWS GovCloud connection profile for preconfigured settings

  • Authentication with temporary token
    • Download S3 (Temporary Credentials) connection profile for preconfigured settings. Use Cyberduck for Windows or ​Cyberduck CLI on EC2 and have setup ​IAM Roles for Amazon EC2 to provide access to S3 from the EC2 instance.

      Documentation

    • Download S3 (Credentials from AWS Security Token Service) connection profile for preconfigured settings. Obtain temporary credentials from AWS Security Token Service (STS)

      Documentation

Features

Versioning and MFA
Support for bucket versioning and Multi-Factor Authentication Delete. With versioning enabled, revert to any previous version of a file.

ACL
Configure Access Control Lists (ACLs) for fine grained access permissions. Copy a signed URL for temporary access.

Bucket Lifecycle Configuration
Configure S3 to archive objects in Glacier.

Metadata
You can edit standard HTTP headers and add custom HTTP headers to files to store metadata and control cache expire settings. Batch editing included.

AWS Security Token Service (STS)
Read credentials from ~/.aws/credentials and connect with AssumeRole from AWS Security Token Service (STS) with optional Multi-Factor Authentication (MFA).

Providers

We do not endorse any particular provider. This list is in not exhaustive and in no particular order.