AWS Transfer Family for SFTP to S3 Migration

SAA-C03 By islever Editorial Last updated

Design secure access to AWS resources.

Short answer

B Create an AWS Transfer Family endpoint for vendors that use legacy applications.

Question

A company has an on-premises application that uses SFTP to collect financial data from multiple vendors. The company is migrating to the AWS Cloud. The company has created an application that uses Amazon S3 APIs to upload files from vendors. Some vendors run their systems on legacy applications that do not support S3 APIs. The vendors want to continue to use SFTP-based applications to upload data. The company wants to use managed services for the needs of the vendors that use legacy applications. Which solution will meet these requirements with the LEAST operational overhead?
  1. Create an AWS Database Migration Service (AWS DMS) instance to replicate data from the storage of the vendors that use legacy applications to Amazon S3. Provide the vendors with the credentials to access the AWS DMS instance.
  2. Create an AWS Transfer Family endpoint for vendors that use legacy applications. Correct Answer
  3. Configure an Amazon EC2 instance to run an SFTP server. Instruct the vendors that use legacy applications to use the SFTP server to upload data.
  4. Configure an Amazon S3 File Gateway for vendors that use legacy applications to upload files to an SMB file share.

Key Takeaways

The core concept is identifying the specific AWS managed service designed to bridge legacy file transfer protocols (like SFTP) with modern cloud storage (S3), avoiding the operational burden of self-managed EC2 instances.

This question addresses migrating on-premises SFTP workflows to AWS using AWS Transfer Family, a fully managed service that enables legacy applications to upload files directly to Amazon S3 via SFTP with minimal operational overhead.

Common mistake: Candidates often select Option C (EC2 instance) because it is a familiar way to run an SFTP server, but this fails the 'LEAST operational overhead' requirement by requiring manual patching, scaling, and maintenance of the operating system and application.

Expert Analysis

Why the Answer Is Correct

Option B is correct because AWS Transfer Family is a fully managed service specifically designed to support secure file transfers using SFTP, FTPS, and FTP protocols directly to Amazon S3 or Amazon EFS. By creating an endpoint, the company provides vendors with a familiar interface without requiring changes to their legacy applications. This solution eliminates the need to manage underlying infrastructure, satisfying the 'managed services' and 'least operational overhead' requirements.

Why the Other Options Are Wrong

Option A (AWS DMS) is incorrect because Database Migration Service is intended for replicating database data, not for hosting file-based SFTP endpoints for external vendors. Option C (EC2 instance) involves significant operational overhead as the company must manage the OS, security patches, and high availability of the SFTP server. Option D (S3 File Gateway) supports SMB and NFS protocols for on-premises file shares, but it does not support SFTP, which is explicitly required by the vendors.

Community Comment Notes

The community consensus strongly supports Option B. As Sergiuss95 noted, "AWS Transfer Family is a fully managed service... without requiring them to make any changes." LeonSauveterre correctly pointed out that "D - S3 File Gateway supports SMB and NFS, not SFTP," highlighting a common confusion point between file gateway types.

Official Reference

https://docs.aws.amazon.com/transferserver/latest/userguide/what-is-aws-transfer-family.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

When a question mentions 'legacy applications' needing 'SFTP' or 'FTPS' access to cloud storage, immediately consider AWS Transfer Family. Always check if the protocol matches the service capabilities; for example, do not confuse S3 File Gateway (SMB/NFS) with Transfer Family (SFTP/FTPS/FTP).

Frequently Asked Questions

Why can't I use S3 File Gateway for SFTP?

S3 File Gateway only supports SMB and NFS protocols for on-premises file shares. It does not support SFTP, which is why AWS Transfer Family is required.

Is AWS DMS suitable for SFTP file replication?

No. AWS DMS is designed for database migration and replication, not for providing persistent file transfer endpoints for external vendors.

More SAA-C03 FAQ →

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. Sergiuss95 👍 4 Answered B
    Explanation: AWS Transfer Family is a fully managed service that allows you to set up SFTP, FTPS, and FTP endpoints for accessing Amazon S3 and Amazon EFS storage. By creating an AWS Transfer Family endpoint, the company can provide vendors with the familiar SFTP interface to upload data directly to Amazon S3 without requiring them to make any changes to their legacy applications. This solution eliminates the need for the company to manage and maintain additional infrastructure such as EC2 instances or file gateways. AWS Transfer Family handles scalability, availability, and security, reducing operational overhead for the company.
  2. LeonSauveterre 👍 1 Answered B
    A - DMS is designed for database migrations, not for file-based SFTP uploads. B - AWS Transfer Family is a fully managed service that supports SFTP, FTPS, and FTP protocols. C - OK but significant operational overhead. D - S3 File Gateway supports SMB and NFS, not SFTP.
  3. asdfcdsxdfc 👍 8 Answered B
    B is correct
  4. Johnoppong101 👍 1 Answered B
    Answer is B

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

S3 Multi-Region Access Point and Replication Strategy

S-grade

Securing NLB with Security Groups for Minimal Change

S-grade

Most Cost-Effective 7-Year Retention for EBS Snapshots?

S-grade

AWS Forecast vs SageMaker for Time-Series Prediction

S-grade

Practice All SAA-C03 Questions

Access 120 questions with complete answers and detailed explanations.

View Full SAA-C03 Practice Test →

← Back to SAA-C03 Study Guide