咨询：如何从AWS创建的RDP实例访问S3存储桶文件夹（非FTP方案）

Absolutely! You don’t need to rely on an FTP server to access S3 directly from your AWS RDP (Windows EC2) instance. There are several native, secure, and straightforward methods to do this—here are the most practical options tailored to your use case:

1. Mount S3 as a Network Drive (For GUI/Existing Software Access) #

If you want to access S3 folders just like a local drive in File Explorer (so your existing software can read/write to S3 without modifications), use Mountpoint for Amazon S3 (AWS’s official tool for Windows and Linux):

• Install Mountpoint on your RDP instance: Grab the installer from AWS’s official resources (you can find it in the AWS Management Console’s S3 section or via AWS CLI).
• Configure it to mount your target S3 bucket/folder: Run a command like:

  mount-s3 your-bucket-name X: --prefix folder/subfolder/
  

  This will map the folder/subfolder/ path in your bucket to the X: drive in Windows.
• Pro tip: Attach an IAM role to your RDP instance with permissions like s3:GetObject, s3:PutObject, and s3:ListBucket restricted to your target bucket/folder. This avoids hardcoding credentials and is far more secure than using access keys directly.

2. Use AWS CLI for Scripted/Manual Access #

If you prefer command-line operations or need to automate file transfers, the AWS CLI is a robust, flexible option:

• Install the AWS CLI on your RDP instance.
• Configure credentials (again, using an attached IAM role is ideal—if the role is set up correctly, the CLI will auto-detect it without manual configuration).
• Run commands to interact with S3:
  • List files in a folder: aws s3 ls s3://your-bucket/folder/
  • Copy a file from RDP to S3: aws s3 cp C:\local\file.txt s3://your-bucket/folder/
  • Sync a local folder with S3: aws s3 sync C:\local\folder s3://your-bucket/folder/

3. Integrate AWS SDK into Your Custom Software #

If your self-deployed software is custom-built, you can directly integrate the AWS SDK (e.g., AWS SDK for .NET for Windows applications) to interact with S3:

• Add the SDK package to your project (via NuGet for .NET projects).
• Use the SDK’s S3 client to perform operations like listing objects, downloading files, or uploading data directly from your code.
• This method gives you full control over how your software interacts with S3, and you can leverage the IAM role attached to the RDP instance for seamless, secure authentication.

Key Security Note #

Always follow the principle of least privilege: When setting up IAM roles or policies, only grant permissions for the specific S3 bucket/folder your RDP instance needs access to—avoid broad, unrestricted S3 permissions.

内容的提问来源于stack exchange，提问作者BigBosss