I’m creating an app where a user can upload/remove a profile picture established to their account. I’ve seen numerous things on this but nothing quite fits my scenario.
I’m using Okta as the Idp and all user accounts are held within Okta Universal Directory. I was planning on using AWS for a lot of the backend infrastructure unrelated to login/authentication.
So this specific scenario, is the user uploading a profile picture, which would be stored in AWS s3 (a profile picture bucket with sub folders per user. Each folder contains history of profile pictures).
This is all public, no need for a specific restriction on reading. The problem comes in with restricting the update/delete/upload only being from the logged in user, or some type of administrator.
All AWS s3 examples I have seen show using AWS cognito or some other AWS product which is not the case here.
So my question is, am I going down the right path of using S3 to stored the pictures? Or am I better off storing them in my own DB? Or any other solution?