Browse and transfer Amazon S3 files with GlanceSSH

Connect to a known Amazon S3 bucket and region, supply supported AWS credentials and review file transfers and access errors.

By Chris Russell, GlanceSSH developer · Updated

GlanceSSH Amazon S3 browser showing folders and files in an example bucket
Amazon S3 browsing in GlanceSSH on iPhone. Example bucket contents shown.

Gather the bucket and credentials

GlanceSSH connects directly to a known Amazon S3 general-purpose bucket. You need its exact bucket name, AWS region and an authorised access key ID and secret access key. Temporary credentials also require their matching session token.

This is direct bucket access, not AWS console login or account-wide bucket discovery. AWS SSO, role assumption, credential auto-refresh, S3 Express, access-point ARNs and custom S3-compatible endpoints are not supported.

Save the S3 connection

  1. In Connections, choose Add connection (+), then Amazon S3.
  2. Enter a recognisable name, the bucket name and its region.
  3. Enter the access key ID and secret access key. Include the session token when using temporary credentials.
  4. Save and open the connection to browse the bucket’s objects and folder prefixes.

Keep all temporary credential fields from the same issued set and replace them when they expire. Credentials are stored in Keychain; supported credential records can participate in optional private iCloud sync.

Request only the permissions you need

Ask the bucket administrator for access to the required bucket and object prefix. Listing uses s3:ListBucket; reading uses s3:GetObject; uploading uses s3:PutObject. Deletion requires s3:DeleteObject. Renaming an object involves copy and delete permissions.

Bucket policies, identity policies and encryption-key permissions can all affect access. Do not make a bucket public to resolve an app error. See AWS access control guidance.

Upload, download and review changes

Browse to the intended prefix, select a file or folder upload and review keep-or-replace choices. Existing objects are kept by default. Downloads use the native exporter so you can choose the local destination.

Keep the app active throughout transfers. File and folder transfers support progress and cancellation, but work completed before cancellation can remain remotely. Transfers are bounded to 10,000 items and 64 levels.

S3 folders are object-name prefixes. Individual objects can be renamed by copy/delete up to 5 GB; prefix/folder rename and recursive deletion are not supported. Uploads use a single PUT with a 5,000,000,000-byte app limit; multipart upload is not supported. Versioned buckets can retain previous object versions.

Resolve access and region errors

Check the exact bucket name and region first. For expired-token errors, replace the whole temporary credential set. For Access Denied, ask the administrator to inspect the relevant policies and encryption settings; a valid access key does not itself grant bucket access.

Use AWS’s S3 access-denied guide for policy diagnostics. For a filesystem hosted on your own SSH server, use SFTP instead. Read privacy details for credential storage and optional sync.

Related guides

All SSH and file transfer guides