如何从Lambda函数访问S3存储桶中的文件

Question

我的S3存储桶中有一个文件，我想从Lambda函数访问此文件。

当我将此文件的路径传递给方法之一时，出现错误：

找不到路径'/var/task/https:/s3.amazonaws.com/TestBucket/testuser/AWS_sFTP_Key.pem”的一部分。

例如：

TestMethod("https://s3.amazonaws.com/TestBucket/testuser/AWS_sFTP_Key.pem")

码：

public void FunctionHandler(S3Event s3Event, ILambdaContext lambdaContext)
        {
            ConnectionInfo connectionInfo = new ConnectionInfo("xxx.xxx.xx.xxx", "testuser",
                                                   new AuthenticationMethod[]{
            new PrivateKeyAuthenticationMethod("testuser", new PrivateKeyFile[] {
                new PrivateKeyFile("https://s3.amazonaws.com/TestBucket/testuser/AWS_sFTP_Key.pem")})
});

            SftpClient sftpClient = new SftpClient(connectionInfo);
            sftpClient.Connect();
            lambdaContext.Logger.Log(sftpClient.WorkingDirectory);
            sftpClient.Disconnect();
        }

Answer 1

您可以使用AWS SDK如下所示从S3读取文件，但是我建议使用AWS Certificate Manager或IAM来存储和管理您的证书和密钥：

PS：确保为lambda函数或存储桶策略分配了适当的角色，以便存储桶能够从S3获得GetObject ：

    RegionEndpoint bucketRegion = RegionEndpoint.USWest2;//region where you store your file

    client = new AmazonS3Client(bucketRegion);

    GetObjectRequest request = new GetObjectRequest();

    request.WithBucketName(BUCKET_NAME);//TestBucket
    request.WithKey(S3_KEY);//testuser/AWS_sFTP_Key.pem

    GetObjectResponse response = client.GetObject(request);

    StreamReader reader = new StreamReader(response.ResponseStream);

    String content = reader.ReadToEnd();

更多帮助：

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html
• https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
• https://docs.aws.amazon.com/AmazonS3/latest/dev/RetrievingObjectUsingNetSDK.html