AWS Storage Gateway User Guide
Using Your File Share
When you enter allowed users and groups, you are creating a whitelist. Without a whitelist, all
authenticated Microsoft AD users can access the SMB file share. Any users and groups that are
marked as denied are added to a blacklist and can't access the SMB file share. In instances where a
user or group is on both the blacklist and whitelist, the blacklist takes precedence.
You can enable Access Control Lists(ACLs) on your SMB file share. For information about how to
Using Microsoft Windows ACLs to Control Access to an SMB File Share (p. 307)
Next Step
Testing Your File Gateway (p. 55)
Working with File Shares on a Bucket with Pre-exisiting Objects
You can export a file share on an Amazon S3 bucket with objects created outside of the file gateway
using either NFS or SMB. Objects in the bucket that were created outside of the gateway display as
files in either the NFS or SMB file system when your file system clients access them. Standard Portable
Operating System Interface (POSIX) access and permissions are used in the file share. When you write
files back to an Amazon S3 bucket, the files assume the properties and access rights that you give them.
You can upload objects to an S3 bucket at any time. For the file share to display these newly added
objects as files, you need to
the section called “Refreshing Objects in Your Amazon S3 Bucket” (p. 153)
first.
Note
We don't recommend having multiple writers for one Amazon S3 bucket. If you do, be sure to
read the section "Can I have multiple writers to my Amazon S3 bucket?" in
To assign metadata defaults to objects accessed using NFS, see Editing Metadata Defaults in
called “Managing Your File Gateway” (p. 144)
For SMB, you can export a share using Microsoft AD or guest access for an Amazon S3 bucket with pre-
existing objects. Objects exported through an SMB file share inherits POSIX ownership and permissions
from the parent directory right above it. For objects under the root folder, root Access Control Lists
(ACL) are inherited. For Root ACL, the owner is
smbguest
and the permissions for files are
666
, and the
directories are
777
. This applies to all forms of authenticated access (Microsoft AD and guest)
Testing Your File Gateway
You can copy files and folders to your mapped drive. The files automatically upload to your Amazon S3
bucket.
To upload files from your windows client to Amazon S3
1. On your Windows client, navigate to the drive that you mounted your file share on. The name of
your drive is preceded by the name of your S3 bucket.
2. Copy files or a folder to the drive.
3. On the Amazon S3 Management Console, navigate to your mapped bucket. You should see the files
and folders that you copied in the Amazon S3 bucket that you specified.
You can see the file share that you created in the
File shares
tab in the AWS Storage Gateway
Management Console.
Your NFS or SMB client can write, read, delete, rename, and truncate files.
API Version 2013-06-30
55
