Amazon S3 via FIPS 140-3 Endpoints

FIPS Publication 140-3 is a U.S. and Canadian government standard that specifies security requirements for cryptographic modules. It supersedes FIPS 140-2.

AWS FIPS endpoints encrypt data in transit using FIPS-validated cryptographic libraries. The Amazon S3 (FIPS 140-3) account type in TntDrive sends Amazon S3 requests through regional dual-stack FIPS endpoints and always uses HTTPS.

Use this account type for buckets in the standard AWS partition in the supported U.S. and Canadian Regions. For AWS GovCloud (US), use the Amazon S3 GovCloud (FIPS 140-3) account type described on the AWS GovCloud (US) page.

Supported Amazon S3 FIPS endpoints

TntDrive selects the endpoint automatically based on the bucket Region. You do not need to enter an endpoint when adding an account.

Amazon S3 FIPS endpoints are not available for this account type in other standard AWS Regions.

Using a FIPS endpoint applies to the TLS connection between TntDrive and Amazon S3. It does not by itself establish compliance for the workstation, stored data, application configuration, or the complete system.

TntDrive behavior for FIPS accounts

• HTTPS is mandatory. Use secure transfer (SSL/TLS) is enabled and cannot be turned off.
• TntDrive signs requests using AWS Signature Version 4.
• Listing all buckets is not supported for this account type. Enter an existing bucket name manually when adding a mapped drive.
• Amazon S3 Transfer Acceleration is not available through FIPS endpoints.

Add an Amazon S3 FIPS account to TntDrive

1. Start TntDrive Dashboard and choose Accounts > Add new account...

   

2. The Add New Account dialog will open.

   

3. Enter an account name.

4. Choose Amazon S3 (FIPS 140-3) as the account type.

5. Specify an Access Key ID and Secret Access Key with permission to access the required bucket.

   If you need help obtaining access keys, see Where do I get my Access Key ID and Secret Access Key?

6. Use secure transfer (SSL/TLS) is enabled automatically for this account type.

7. Click Add new account.

You can now add a new mapped drive and select this account. Enter the existing bucket name manually; TntDrive will send requests through the dual-stack FIPS endpoint for the bucket Region.