Amazon S3 Architecture · 2025
S3 Hive
Storage that stops bleeding money
Node.jsExpressReactAWS CognitoAWS S3AWS IAMEC2CloudFormationCloudFront
Access Control
Per-Group Folders
Auth Model
Cognito + IAM Roles
Deployment
100% CloudFormation
The problem
Managing multi-user access to cloud storage required manual IAM permissions, leading to permission drift, security risks, and lack of tenant isolation.
What I built
Mapped Cognito user groups to dedicated S3 folders with automatically provisioned IAM roles, so each user only accesses their allocated folder space. Deployed on EC2 with replicable AMIs and a reusable CloudFormation template provisioning Cognito pools, identity pools, groups, IAM roles, and S3 buckets, fronted by CloudFront.
- Automated mapping from Cognito identity groups directly to dedicated S3 prefix boundaries
- Dynamically provisioned least-privilege IAM roles preventing any cross-user data leakage
- Reusable CloudFormation template creating auth pools, IAM roles, storage buckets, and CloudFront CDN
- Repeatable EC2 Golden AMIs enabling instant environment recreation with zero configuration drift
Need secure multi-tenant storage?
I build isolated, automated AWS storage and auth pipelines where access and compliance are fully codified.