Sold by: Artpro Teknoloji
Deployed on AWS
Single-tenant, S3-compatible gateway (like MinIO) that lets any S3 tool (Veeam, restic, AWS CLI) use S3 One Zone-Infrequent Access directory buckets in the Istanbul Local Zone, keeping your backup data in-country. Pick an AccessMode: VPN, PublicHTTPS, or Private.
Overview
stds3 is a single-tenant, S3-compatible gateway - the same S3 API that open S3-compatible servers such as MinIO expose - that lets backup and storage clients use S3 One Zone-Infrequent Access directory buckets deployed in the AWS Istanbul Local Zone.
Many enterprise backup tools - Veeam, Commvault, restic, and any boto3 or AWS CLI workflow - need a standard S3 endpoint and cannot natively address directory buckets. stds3 bridges that gap by accepting standard S3 API calls over HTTPS and translating them to the directory-bucket format, giving your existing tools in-zone, in-country directory-bucket storage with no code changes.
Each deployment lives entirely within your own AWS account and is delivered as a hardened Ubuntu 22.04 AMI launched via CloudFormation. Security is defense-in-depth: nginx terminates TLS, nftables enforces scoped egress, instance metadata is locked to token-only access, and operating-system access is through Systems Manager only, with no SSH daemon.
A single AccessMode parameter chooses how clients reach the gateway: VPN (default) puts a WireGuard endpoint on the public firewall so remote or on-premises clients connect over an encrypted tunnel; PublicHTTPS has the public firewall accept client HTTPS 443 directly; Private keeps the gateway and load balancer private so you connect over your own AWS Direct Connect, VPN, or peering. You pick one scenario for how clients connect.
Getting connected is a single, one-time setup step: after the stack deploys, run the one-time initial instance setup shown in the stack Outputs to connect your clients. It runs once and can then only be re-run from within the instance. Everything is generated and stays inside the Local Zone; nothing is entered on the launch form, and the gateway reaches the directory bucket through a least-privilege IAM role.
Optional layered security is available in any mode: an in-instance ModSecurity web application firewall (OWASP Core Rule Set) and an in-zone internal Application Load Balancer.
Pricing is free: no per-request, per-GB, or software charge. You pay only AWS for the EC2, ALB, and S3 One Zone-Infrequent Access resources the stack creates in your own account.
Deploy stds3 into the Istanbul Local Zone to give on-premises or edge workloads in-country access to durable object storage through the S3 API your tools already speak.
Highlights
- Standard S3 API for tools that can't use directory buckets natively
- In-zone S3 One Zone-Infrequent Access directory-bucket storage in the AWS Istanbul Local Zone
- Free software price: you pay only AWS for the resources in your own account
Details
Sold by
Categories
Delivery method
Delivery option
Turnkey CloudFormation deployment
Latest version
Operating system
Ubuntu 22.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
stds3 is offered at no charge ($0), so there are no product fees to refund. You pay only for the AWS resources you provision in your own account, which are billed directly by AWS and are outside our control. If you believe you were charged for this product in error, contact Artpro Teknoloji Ltd. Sti. at dincer.gunes@artpro.com.tr (09:00 to 18:00 TRT, Mon to Fri) and we will investigate and assist.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Turnkey CloudFormation deployment
This delivery option launches a complete, self-contained, fully in-zone deployment in your own AWS account from a single CloudFormation template. It creates a dedicated VPC with public and private subnets in the Istanbul Local Zone (eu-central-1-ist-1a), an Auto Scaling group of stds3 gateway instances (no public IPs), an S3 gateway VPC endpoint for in-zone directory-bucket data access, an in-zone OpenBao instance (open-source secrets store) that holds the gateway's own in-zone configuration, an in-zone NAT instance for controlled outbound OS and security updates, and least-privilege IAM roles and security groups.
A single AccessMode parameter selects how clients reach the gateway:
- VPN (default): a WireGuard endpoint on the public firewall; clients connect over an encrypted tunnel.
- PublicHTTPS: the public firewall accepts client HTTPS 443 directly.
- Private: no internet-facing entry; the gateway and ALB stay private and you reach them over your own connectivity (Direct Connect, your own VPN, or peering).
Optional add-ons work in any mode: EnableWaf (in-instance ModSecurity, OWASP Core Rule Set, detection-only) and EnableAlb (an in-zone internal Application Load Balancer). Leave DirectoryBucket blank to have the stack create a managed, encrypted S3 One Zone-Infrequent Access directory bucket in the Local Zone, or supply your own.
Your backup data stays inside your account and the Istanbul Local Zone; only control-plane metadata resides in the parent Region.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
New: a single AccessMode parameter (VPN default, PublicHTTPS, or Private) makes the connectivity scenario explicit. VPN is the default so a default launch is reachable out of the box. WAF and ALB remain optional in any mode. Backup and restore unchanged.
Additional details
Usage instructions
OVERVIEW stds3 is an S3-compatible gateway that runs entirely inside the Istanbul Local Zone (eu-central-1-ist-1a) and stores data in an in-zone S3 One Zone-Infrequent Access directory bucket. Deploy the provided CloudFormation template in eu-central-1.
CHOOSE AN ACCESS MODE (the AccessMode parameter) (A) VPN (default): a WireGuard endpoint on the public firewall. Set VpnClientSourceCidr to your client site's public IP; clients connect over the tunnel. (B) PublicHTTPS: the public firewall accepts client HTTPS 443 directly. Set at least one AllowlistCidr to your client's public IP. (C) Private: no internet-facing entry. The gateway and ALB stay private; reach them over your own connectivity (Direct Connect / your VPN / peering) and set AllowlistCidr to your source.
QUICK START
- Launch the template in eu-central-1 and choose your AccessMode (see above).
- Wait for CREATE_COMPLETE, then open the stack Outputs.
- If EnableAlb=true, run the AlbCertMode command shown in the Outputs from AWS CloudShell to create the ALB HTTPS:443 listener.
- If AccessMode=VPN, bring up WireGuard: set your client [Peer] Endpoint to the VpnEndpoint output and fetch the firewall server public key per the VpnServerPublicKeyRetrieval output.
- Run the AutoAuthSetup command from the Outputs to complete the one-time initial instance setup.
- Point your backup tool (Veeam, restic, AWS CLI) at the endpoint.
OPTIONAL ADD-ONS (any AccessMode)
- EnableWaf: in-instance ModSecurity (OWASP CRS, detection-only).
- EnableAlb: an in-zone internal Application Load Balancer.
STORAGE
- Leave DirectoryBucket blank for a managed, encrypted S3 One Zone-Infrequent Access directory bucket in the Local Zone, or supply your own directory bucket name.
Support
Vendor support
Support is provided by Artpro Teknoloji. Email dincer.gunes@artpro.com.tr for installation, configuration, and troubleshooting help. Support hours are 09:00 to 18:00 Turkiye Time (UTC+3), Monday to Friday, excluding public holidays; we target a response within one business day. Coverage includes deploying the CloudFormation template, gateway/firewall/VPN configuration, and S3 One Zone-Infrequent Access connectivity. The software is free; you pay only for the AWS resources it runs in your own account.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
High performance Go based microservice for Amazon S3 that zips files on the fly, streaming archives directly to S3 buckets or generating instant browser download links via IIS.
S3zipper V2 is a high performance Go based microservice that zips AWS S3 files on the fly, streaming archives directly to S3 buckets or generating instant browser download links with automated HTTPS.
FileMage Gateway is a FTP and SFTP server backed by Amazon S3. A web based file sharing portal is also available with customizable branding.
The Citizen Experience service helps councils design digital services that are faster, more accessible, and resident-centred. By re-imagining online interactions with a focus on inclusion and usability, Symphony3 helps boost satisfaction, reduce staff workload, and increase trust in local government. Supported by SmartGlue and AWS services, it enables seamless, data-driven digital experiences that deliver real community impact.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.