All posts
AWS Amplify

Storage Browser for Amazon S3: A Customer File Portal Without Building One

By

October 26, 2026

4 min read

Storage Browser for S3, an open-source component in the Amplify React and JavaScript libraries and generally available since December 2024, gives authorized users a file browser for S3: browse, search, upload, download, copy and delete, with checksums on upload. When it replaces a custom portal or an SFTP server, and how to scope access safely.

AWS Amplify
Amazon S3
Storage Browser
File Sharing
Amplify UI

Plenty of B2B products need a place where customers or partners exchange files: reports, invoices, data drops, design files. Teams build this repeatedly, or keep an SFTP server running for it. Storage Browser for S3 is a ready-made component for the user-facing half.

Want a second opinion on this for your system?

Book a free 30-minute call. You'll leave knowing what we'd do first and roughly what it costs, whether or not you hire us.

What it does

  • Browse, search by file name, upload, download, copy and delete objects the user is allowed to access.

  • Calculates checksums on upload so S3 accepts objects only after confirming integrity in transit.

  • Works with Amplify Auth and Storage, with IAM Identity Center and S3 Access Grants for workforce users, or with your own credentials provider.

  • Is backed by AWS Support for customers on Business and Enterprise plans.

Scoping access

  • Give each customer a prefix and grant access to that prefix only, enforced in IAM or S3 Access Grants rather than in the UI.

  • Use short-lived credentials from Cognito or Identity Center, never long-lived keys in the browser.

  • Turn on S3 versioning and lifecycle rules so deletes are recoverable and old files age out.

  • Log access with CloudTrail data events for buckets that hold customer data.

hoolco Monthly Review

Once a month: what changed in tech that month and what it means for you, from cloud and AI to security and the tools you build with. Every item links to its source. No sales pitch, unsubscribe in one click.

As of October 26, 2026. Provided as is, for general information, and accurate to the best of our knowledge on the date shown. Not legal, compliance, tax, financial or other professional advice. Prices, limits and vendor services change; check current vendor documentation before relying on anything here. Terms of use.