Mount Amazon S3 with AWS Credential Profiles

The Amazon S3 via AWS Config or Credentials File account type lets TntDrive load credentials from a named profile in an AWS config or shared credentials file.

TntDrive stores only the selected file path and profile name in the account configuration. It does not copy the access key, secret access key, or session token into the account.

TntDrive reads the file through TntDrive Service and reloads the credentials automatically when the file's last-modified time changes. Make sure the service has read access to the file and protect the plaintext credentials with appropriate Windows file permissions.

Use this account type for profiles that directly contain access-key credentials. TntDrive does not process role_arn, source_profile, credential_process, IAM Identity Center (SSO), Region, endpoint, or other AWS CLI profile settings.

Prepare an AWS credential profile

The AWS shared credentials file is normally stored in %USERPROFILE%\.aws\credentials

The default profile uses [default]; named profiles do not use the profile prefix:

[default]
aws_access_key_id = ACCESS_KEY
aws_secret_access_key = SECRET_KEY
aws_session_token = TOKEN

[Alice]
aws_access_key_id = Alice_access_key_ID
aws_secret_access_key = Alice_secret_access_key

[Bob]
aws_access_key_id = Bob_access_key_ID
aws_secret_access_key = Bob_secret_access_key

The AWS config file is normally stored in %USERPROFILE%\.aws\config. Named profiles in this file use the [profile profile-name] format:

[default]
aws_access_key_id = ACCESS_KEY
aws_secret_access_key = SECRET_KEY
aws_session_token = TOKEN

[profile Alice]
aws_access_key_id = Alice_access_key_ID
aws_secret_access_key = Alice_secret_access_key

[profile Bob]
aws_access_key_id = Bob_access_key_ID
aws_secret_access_key = Bob_secret_access_key

TntDrive reads the following settings:

• aws_access_key_id - the AWS access key ID. This setting is required.
• aws_secret_access_key - the secret access key associated with the access key ID. This setting is required.
• aws_session_token - the session token. This setting is required when the profile contains temporary security credentials.
• aws_security_token - a legacy session-token setting supported for backward compatibility. Use aws_session_token for new profiles.

For AWS GovCloud (US), choose Amazon S3 GovCloud via AWS Config or Credentials File and use credentials from the AWS GovCloud (US) partition.

Add an AWS credential profile account to TntDrive

1. Start TntDrive Dashboard and choose Accounts > Add new account...

   

2. The Add New Account dialog will open.

   

3. Enter a descriptive account name.

4. Choose Amazon S3 via AWS Config or Credentials File as the account type.

5. Enter the full path in Config or Credentials File, for example: C:\Users\Alice\.aws\credentials

   If you leave this field empty, TntDrive checks AWS_CONFIG_FILE first and AWS_SHARED_CREDENTIALS_FILE second when the account is saved. TntDrive does not search the default folders automatically, so entering an explicit path is recommended.

6. Enter the profile name without brackets or the profile prefix. For [Alice] or [profile Alice], enter Alice.

   If you leave this field empty, TntDrive uses AWS_PROFILE when the account is saved, or default if AWS_PROFILE is not defined. TntDrive requires an exact profile match and does not substitute another profile.

7. Keep Use secure transfer (SSL/TLS) enabled.

8. Click Add new account.

You can now add a new mapped drive and select this account. TntDrive will load the credentials from the selected profile and reload them when the file changes.