The canonical AWS Security Blog post is titled “How Transfer Family can help you build a secure, compliant managed file transfer solution.” The word build is the honest read. AWS sells a building block. The full MFT product is the customer’s responsibility.
Every published AWS reference architecture chains Transfer Family with eight to fourteen more services — Lambda, Step Functions, EventBridge, SQS, DynamoDB, Secrets Manager, CloudWatch, CloudTrail, SNS — plus the UI, API, and auth stack you write yourself. AWS’s own Architecture Blog states the gap plainly: “Before this feature was released, the MFT architecture based on Transfer Family involved responding to Amazon S3 events within AWS Lambda functions. There was no overarching orchestration layer.”
Files.com is the buy side of that build-or-buy decision, with the buy side already done. SFTP, FTPS, FTP, WebDAV, AS2, Automations, Inboxes, Share Links, the Agent, PGP encryption, a complete audit log, and the REST API and SDKs in 8 languages — one product, one price. Your S3 bucket stays where it is; we mount it. Your Amazon SNS topic stays where it is; we publish to it.