AWS Storage Gateway now supports FIPS-compliant private connectivity for Amazon S3 File Gateway

AWS Storage Gateway now supports a FIPS 140-3 validated endpoint for Amazon S3 File Gateway via AWS PrivateLink. Previously, File Gateway FIPS endpoints were only available over the public internet; this change enables maintaining FIPS-compliant traffic over a private AWS network, simplifying storage gateway use for regulated workloads. File Gateway can now privately access storage gateway service endpoints through a FIPS interface VPC endpoint within a VPC. You can create NFS and SMB file shares to reach Amazon S3 via the S3 FIPS interface endpoint, enabling end-to-end FIPS-compliant private connectivity for file transfer workloads. To get started, create storage gateway and Amazon S3 FIPS interface endpoints in your VPC, and select the FIPS VPC endpoint option when activating the gateway and configuring file shares. Activating the gateway with the FIPS PrivateLink endpoint requires software version 2.1.10 or later. This release is available in eight AWS regions where storage gateway provides FIPS endpoints.

Why it matters

This update affects users who run regulated workloads with AWS Storage Gateway. FIPS-compliant private connectivity makes it easier to use Storage Gateway while meeting security requirements.