Skip to main content

​
What are Direct Downloads

Direct Downloads are our generally available Pull option for Data License delivery. PDL hosts your licensed datasets in a secure PDL-managed location, and you download each delivery on your schedule. Push vs Pull Deliveries Historically, People Data Labs only offered a Push delivery model for Data License customers, where we send your dataset directly to a storage location that you own and have configured, such as S3, Azure, GCP, or Snowflake. Direct Downloads give you a Pull alternative: instead of maintaining the destination bucket, you retrieve files from a PDL-hosted location.
ed0856c313d10502cb113f4008ac44245d537f307ccec85ad380783fda50746a-Untitled_presentation_1
Push: Delivery initiated by PDL and pushed to customer-managed delivery location.
3705fcfd1138bb6832812c0fb573003ba471c97311a49b2dccea4f420dfdb3a1-Direct_Downloads_Docs_Graphics
Pull: You download data from a PDL-hosted location.

​
Why Switch to Direct Downloads

  • Less setup: PDL hosts the delivery location, so you do not need to create and maintain your own destination bucket.
  • Flexible retrieval: Download deliveries when it is most convenient for your team.
  • Secure access: Use SFTP, SSH, the AWS CLI, or AWS SDKs with credentials managed through the PDL Dashboard.
  • AWS-native option: IAM Role Access supports role-based AWS access for automated, large-scale downloads.
  • No additional cost: Direct Downloads and AWS IAM Role Access do not add delivery charges.

​
Choosing an Access Method

There are two supported methods of accessing your data when using the Direct Downloads delivery method:
RecommendationOur general recommendation is to use the AWS IAM Role Access authentication method whenever possible as this offers more scalable file transfer workflows as well as more streamlined and robust security configurations.

​
How to Get Started

  1. Contact your CSM Let your Customer Success Manager know you’d like to switch to Direct Downloads. Our team will handle the backend setup and spin up your secure bucket. Note: a minor contract amendment for the adjusted delivery location may be required.
  2. Choose your access method Once we have enabled Direct Download for your account, go to the License Delivery area of your PDL Dashboard and choose either SFTP or AWS IAM Role Access.
  3. Set your credentials For SFTP, retrieve your username and set up your password or SSH key. For AWS IAM Role Access, enter your AWS IAM role ARN and save your credentials.
    Accessing and configuring credentials in the PDL Dashboard

    Accessing and configuring credentials in the PDL Dashboard

  4. Connect and download You will get a notification each time a new dataset is delivered. Once the delivery is ready, download it using your selected access method.

​
Access Direct Downloads with AWS IAM Role Access

AWS IAM Role Access is an additional authentication method for Direct Download customers. It lets you use regular AWS access patterns to retrieve data from a PDL-hosted S3 location. This is different from Data Delivery Using S3. Standard S3 delivery is a Push delivery method where PDL writes data to a bucket you own. Direct Download with AWS IAM Role Access is a Pull delivery method where PDL hosts the delivery location and you retrieve the files from PDL. To use AWS IAM Role Access:
  1. Create or choose the AWS IAM role that your team will use to retrieve Direct Download data.
  2. Copy the role ARN. It should use this format: arn:aws:iam::<account-id>:role/<role-name>.
  3. In the PDL Dashboard, go to License Delivery and choose AWS IAM Role Access.
  4. Enter your IAM role ARN and select Update Credentials.
  5. After PDL configures access, use the S3 path shown in the dashboard to retrieve future deliveries.
PDL uses your AWS IAM role ARN to configure an S3 access point for your dedicated Direct Download data location. Once configured, you can retrieve data using the AWS CLI, an AWS SDK, or direct S3 API calls. Example AWS CLI commands:
Shell
The exact S3 path is provided in the PDL Dashboard after IAM Role Access is configured. IAM Role Requirements The IAM role ARN you provide should identify the role your systems will use to access Direct Download data. Your AWS administrator should make sure that the role can be assumed by the users, services, or automation that will download the files. Depending on your AWS setup, your administrator may also need to allow read access for the PDL-provided S3 location, including actions such as s3:ListBucket and s3:GetObject. If your team uses AWS SSO, CI/CD roles, or another role-assumption workflow, use the role that will be active when your download process runs. If your security team needs the exact trust policy, access point ARN, or bucket policy requirements, contact your Customer Success Manager. Switching Authentication Methods You can switch between SFTP and AWS IAM Role Access in the PDL Dashboard. Changing authentication methods only changes where future deliveries are made available. Previously delivered data remains in the old location and is not automatically copied to the new location. If you need previously delivered data copied to the new location, contact your Customer Success Manager.

​
Access Direct Downloads with SFTP

If you use SFTP, connect with your preferred SFTP client using the following details:
  1. Host: pdl.sftp.peopledatalabs.com
  2. SFTP URL: [username]@pdl.sftp.peopledatalabs.com:
  3. Port: 22
  4. Authentication: username and password, or SSH key
SFTP dashboard walkthroughThe video below shows the Direct Download dashboard and SFTP setup flow. It does not yet show the AWS IAM Role Access configuration options. For IAM setup, use the steps in Access Direct Downloads with AWS IAM Role Access.
You can also connect directly from your terminal:
Shell

​
Delivery Completion Files

Direct Download deliveries also include a top-level COMPLETED file when the full delivery is finished. Use this file as the signal that your download and ingestion workflows can begin. For more details on completion signals and delivery readiness, see Data License Ingestion.

​
Frequently Asked Questions

Yes. Direct Download supports secure SFTP access and AWS IAM Role Access. With AWS IAM Role Access, your team can use AWS-native, role-based access for automated downloads.
No. SFTP remains supported. AWS IAM Role Access is an additional Direct Download authentication method for customers who prefer AWS-native workflows.
Yes. You can change your Direct Download authentication method in the PDL Dashboard. The change applies to future deliveries only.
Yes. For SFTP, you can use tools like sftp or compatible SFTP clients. For AWS IAM Role Access, you can use the AWS CLI, AWS SDKs, or direct S3 API calls.
Delivery timing doesn’t change: your data will still be delivered according to your current monthly or quarterly schedule. You’ll get an email notification when it’s ready to download.
By default, any data placed in the bucket will expire after 110 days in order to conserve resources. This allows for some wiggle room if you need any past deliveries.
Older deliveries remain in the location associated with the access method that was active when they were delivered. Switching authentication methods does not copy older deliveries to the new location automatically.
No. AWS IAM Role Access is available for Direct Download customers at no additional cost.

Related topics

May 2026 Release NotesJanuary 2026 Release NotesReceiving and Updating DataFebruary 2026 Release NotesDaily Deliveries (Job Posting Data)