I have a static website coded in angular io. The users on the site should have access to their own s3 buckets. To do this I have created an api gateway with a custom authenticator. Then in the authenticator I can choose which buckets a user has access to. By doing like this.
Is this the right way to solve this problem. Or is there a smarter solution where my angular solution can go straight to s3 without going through the api gateway and still be restricted to specific buckets?
My users are not added as amazon users. They are only in my own database.
My next step here is to look into if I can go through cloudfront with theese requests. If I understand the pricing correctly that will make the transfer from s3 to cloudfront free. But Im not sure if it goes through the api gateway…