Create an SMB file share using the default configuration

To create an SMB file share using the default configuration:

1. Open the Amazon Storage Gateway console at https://console.amazonaws.cn/storagegateway/home/ and choose File shares from the left navigation pane.

2. Choose Create file share.

3. For Gateway, choose the Amazon S3 File Gateway from the dropdown list.

4. For File share protocol, choose SMB.

5. For S3 bucket, do one of the following:

   • Choose an existing Amazon S3 bucket in your account from the dropdown list.

   • Choose A bucket in another account from the dropdown list, then enter the name of the bucket in Cross-account bucket name.

   • Choose Create new S3 bucket, then choose the Amazon Web Services Region where the Amazon S3 endpoint for your new bucket is located, and enter a unique S3 bucket name. Choose Create S3 bucket when finished.

     For information about creating a new bucket, see How do I create an S3 bucket? in the Amazon S3 User Guide.

   Note

   S3 File Gateway does not support support Amazon S3 buckets with periods (.) in the bucket name.

   Make sure your bucket name complies with the rules for bucket naming in Amazon S3. For more information, see Rules for bucket naming in the Amazon Simple Storage Service User Guide.

6. User authentication, choose the authentication method you want to use from the dropdown list:

   • To use your corporate Microsoft Active Directory or Amazon Managed Microsoft AD to authenticate user access to your SMB file share, choose Active Directory. Your gateway must be joined to a domain to use this method. For more information, see Using Active Directory to authenticate users.

     Note

     To use Amazon Managed Microsoft AD with an Amazon EC2 gateway, you must create the Amazon EC2 instance in the same VPC as the Amazon Managed Microsoft AD, add the _workspaceMembers security group to the Amazon EC2 instance, and join the AD domain using the Admin credentials from the Amazon Managed Microsoft AD.

     For more information about Amazon Managed Microsoft AD, see the Amazon Directory Service Administration Guide.

     For more information about Amazon EC2, see the Amazon Elastic Compute Cloud Documentation.

     If Join status indicates that your gateway is already joined to an Active Directory domain, proceed to the next step. Otherwise, do the following:

     1. Choose Configure.

     2. For Domain, enter the name of the Active Directory domain you want your gateway to join.

     3. Enter the Username and Password that the gateway will use to join the domain.

     4. (Optional) For Organization unit (OU), enter the designated OU that your Active Directory uses for new computer objects.

     5. (Optional) For Domain controller(s) (DC), enter the name of the DC through which your gateway will connect to Active Directory. You can leave this field blank to allow DNS to automatically select a DC.

     6. Choose Join Active Directory.

     Note

     Joining a domain creates an Active Directory account in the default container (which isn't an organizational unit) using the Gateway ID as the account name (for example, SGW-1234ADE). It is not possible to customize the name of this account.

     If your Active Directory environment requires that you pre-stage accounts to facilitate the domain join process, you need to create this account ahead of time.

     If your Active Directory environment has a designated OU for new computer objects, you must specify that OU when joining the domain.

   • To grant password-protected access to anyone who provides the guest password that you configure, choose Guest access. Your File Gateway doesn't need to be part of a Microsoft Active Directory domain to use this method. Choose Configure to specify your Guest password, then choose Save.

7. Review the settings under Default configuration, then choose Create file share to create your new SMB file share using the default configuration.