Skip to main content

Cyberduck

Last update:

Cyberduck — is a file manager that supports FTP, OpenStack Swift, and Amazon S3 protocols. You can work with Cyberduck via its graphical or console client. The graphical client is available for Windows and macOS. The console client is available for Windows, Linux, and macOS.

Configure Cyberduck

  1. Configure S3 access.
  2. Configure the client.

1. Configure S3 access

Access can be configured by the Account Owner or a user with the iam.admin role.

  1. Create a service user with a role with S3 access. If you use a service user with the s3.user, object_storage_user, or s3.bucket.user role, an access policy must be configured for the bucket, and its rules must allow access to this user.
  2. Issue an S3 key to the user.

2. Configure the client

  1. Install Cyberduck.
  2. Open Cyberduck.
  3. Click Open Connection.
  4. In the top field, open the list and select More Options.
  5. In the Profiles section, select the Selectel S3 Cloud Storage profile. To use this profile, the bucket must have Virtual-Hosted addressing enabled.
  6. Restart Cyberduck.
  7. Click Open Connection.
  8. In the top field, open the list and select Selectel S3 Cloud Storage.
  9. In the Access Key field, paste the value of the Access key field from the S3 key of the user for whom you configured access in step 1.
  10. In the Secret Key field, paste the value of the Secret key field from the S3 key of the user for whom you configured access in step 1.
  11. Click Connect.

Command format for the console client

To work via the console client, use commands of the following form (with Path-Style addressing):

duck --region <pool> --username <access_key> --password <secret_key> --<command> s3://<s3_domain>/<bucket_name>

Specify:

  • <pool> — the pool where S3 is located;
  • <access_key> — the value of the Access key field from your S3 key;
  • <secret_key> — the value of the Secret key field from your S3 key;
  • <command> — a Cyberduck command; some commands can be found in the CLI documentation;
  • <s3_domain> — the S3 API domain. The domain depends on the pool where S3 is located;
  • <bucket_name> — the bucket name.

You can get a link to an object in a public or private bucket via a signed URL (Presigned URL). Learn more about Presigned URLs in the Sharing objects with presigned URLs section of the AWS documentation.

  1. Open the Cyberduck graphical client.
  2. In the list of bucket objects, right-click the object and select Copy URL.
  3. Select one of the Presigned URL options depending on the desired link lifetime — an hour, a day, or a week.