WinSCP

WinSCP is a GUI client for Windows that allows you to work with cloud storages, including those compatible with the Amazon S3 API.

Getting startedGetting started

1. Create a bucket.

2. Create a service account.

3. Assign the required role to the service account, e.g., storage.editor. To learn more about roles, see Managing access with Yandex Identity and Access Management.

   To work with objects in an encrypted bucket, a user or service account must have the following roles for the encryption key in addition to the storage.configurer role:

   • kms.keys.encrypter: To read the key, encrypt and upload objects.
   • kms.keys.decrypter: To read the key, decrypt and download objects.
   • kms.keys.encrypterDecrypter: This role includes the kms.keys.encrypter and kms.keys.decrypter permissions.

   For more information, see Key Management Service service roles.

   Tip

   You can assign a role for a folder or a bucket to a service account. A role for a folder gives the GUI client access to all the buckets in the folder. A role for a bucket gives the client access only to this particular bucket. For granular access, assign a role for a particular bucket.

4. Create a static access key.

   As a result, you will get the static access key data. To authenticate in Object Storage, you will need the following:

   • key_id: Static access key ID
   • secret: Secret key

   Save key_id and secret: you will not be able to get the key value again.

InstallationInstallation

Download the WinSCP distribution and run it.

ConnectionConnection

1. Run WinSCP.

2. In the Sessions tab, select New Session....

3. Under Sessions, specify the following parameters:

   • File protocol: Amazon S3.
   • Host name: storage.yandexcloud.net.
   • Port number: 443.
   • Access key ID: Previously obtained static key ID.
   • Secret access key: Previously obtained static key contents.

   To connect to a particular bucket, click Advanced.... In the Advanced Site Settings window, select Directories in the left-hand menu, under Environment. In the Remote directory: field, specify the bucket name and click OK.

4. Click Login.

Once the connection is established, the right-hand panel will show the bucket you created earlier.

Learn more about using WinSCP with S3-compatible storages in this WinSCP guide.