Transfers with cloud-based HSTS

Transfers to cloud-based HSTS require authorization credentials to the storage, but are otherwise the same as transfers to on-premises HSTS.

Provide object storage credentials in one of the following ways:

  • Specify the storage password or secret key in the transfer user's docroot (Preferred method).
  • Set the storage password or secret key as an environment variable.
  • Specify the storage password or secret key in the command line.

With docroot configured: Authenticate in the docroot

If your transfer user account has a docroot set that includes credentials or credentials are configured in the .properties file, ascp transfers to and from Alibaba Cloud, Amazon S3, IBM Cloud® Object Storage (COS) and S3, Google Cloud Storage, Akamai, IBM Cloud, Azure, and are the same as regular ascp transfers.

For instructions on configuring a docroot for these types of storage, see Docroot, file permission, and growing files configuration.

For command syntax examples, see Ascp general examples. You are prompted for the transfer user's password when you run an ascp command unless you set the ASPERA_SCP_PASS environment variable or use SSH key authorization.

With no docroot configured: Authenticate with environment variables

Note: The ASPERA_DEST_PASS variable is not applicable to Google Cloud Storage or Amazon S3 that use IAM roles.

Set an environment variable (ASPERA_DEST_PASS) with the storage password or access key:

> set ASPERA_DEST_PASS = secret_key

With ASPERA_DEST_PASS and ASPERA_SCP_PASS set, run ascp with the syntax that is listed in the table for transfers with no docroot configured, except that you do not need to include the storage password or access key, and are not prompted for the Aspera® password upon running ascp.

With no docroot configured: Authenticate in the command line

If you do not have a docroot that is configured and do not set an environment variable (described previously), authenticate in the command line. In the following examples, the storage password or the secret keys are included as part of the destination path. You are prompted for the transfer user's password upon running ascp unless you set the ASPERA_SCP_PASS environment variable or use SSH key authorization.

Storage Platform ascp Syntax and Examples
Alibaba Cloud Run ascp transfers with Alibaba Cloud with a docroot configured.
Amazon S3
  • If you are using IAM roles, you do not need to specify the access ID or secret key for your S3 storage.
Upload syntax: 
> ascp options --mode=send --user=username --host=s3_server_addrgoogle-gcs:source_files s3://access_id:secret_key@s3.amazonaws.com/my_bucket

Upload example:

> ascp --mode=send --user=bear --host=s3.example.com bigfile.txt s3://1K3C18FBWF9902:GEyU...AqXuxtTVHWtc@s3.amazonaws.com/demos2014

Download syntax:

> ascp options --mode=recv --user=username --host=s3_server_addr s3://access_id:secret_key@s3.amazonaws.com/my_bucket/my_source_pathdestination_path

Download example:

> ascp --mode=recv --user=bear --host=s3.example.com s3://1K3C18FBWF9902:GEyU...AqXuxtTVHWtc@s3.amazonaws.com/demos2014/bigfile.txt /tmp/
Azure These examples are for Azure blob storage. For Azure Files, use the syntax: azure-files://storage_account:storage_access_key@file.core.windows.net/share.

Upload syntax:

> ascp options --mode=send --user=username --host=server_address source_files azu://storage_account:storage_access_key@blob.core.windows.net/path_to_blob

Upload example:

> ascp --mode=send --user=AS037d8eda429737d6 --host=dev920350144d2.azure.asperaondemand.com bigfile.txt azu://astransfer:zNfMtU...nBTkhB@blob.core.windows.net/abc

Download syntax:

> ascp options --mode=recv --user=username --host=server //source_file destination_path

Download example:

> ascp --mode=recv --user=AS037d8eda429737d6 --host=dev920350144d2.azure.asperaondemand.com azu://astransfer:zNfMtU...nBTkhB@blob.core.windows.net/abc /downloads
Google Cloud Storage
Note: These examples require that the VMI running the Aspera server is a Google Compute instance. 
> ascp options --mode=send --user=username --host=server_address source_files gs:///my_bucket/my_path

Upload example:

> ascp --mode=send --user=bear --host=10.0.0.5 bigfile.txt google-gcs:///2017_transfers/data

Download syntax:

google-gcs:// 
> ascp options --mode=recv --user=username --host=server gs:///my_bucket/my_path/source_filedestination_path

Download example:

> ascp --mode=recv --user=bear --host=10.0.0.5 google-gcs:///2017_transfers/data/bigfile.txt /data
IBM COS and S3 Upload syntax: 
> ascp options --mode=send --user=username --host=server_address source_files s3://access_id:secret_key@accessor_endpoint/vault_name

Upload example:

> ascp --mode=send --user=bear --host=s3.example.com bigfile.txt s3://3ITI3OIUFEH233:KrcEW...AIuwQ@38.123.76.24/demo2017

Download syntax:

secret_key 
> ascp options --mode=send --user=username --host=server_address s3://access_id:secret_key@accessor_endpoint/vault_name/source_files destination_path

Download example:

> ascp --mode=send --user=bear --host=s3.example.com s3://3ITI3OIUFEH233:KrcEW...AIuwQ@38.123.76.24/demo2017 /tmp/