Logic Solutions Consulting. AWS Lambda, pre-signed uploads, Terraform.
Clientagent
A serverless document intake path: a Lambda that hands back pre-signed upload and download URLs so files never pass through the application at all.
The problem
Client documents had to get in and out reliably without the service becoming a file proxy, paying for the bandwidth and holding the memory of every upload it was asked to relay.
The Lambda issues a pre-signed PUT for the upload and a pre-signed GET for retrieval. The client talks to object storage directly; the function only ever grants and records permission.
Files never pass through the application
The function returns a URL and steps out of the way, so upload size stops being a runtime concern.
Access is time-boxed by construction
A pre-signed URL expires. There is no long-lived credential on the client and no bucket left open to make it convenient.