From Dev.to
Browser Direct-to-Storage Upload for Multi-Tenant SaaS (Cost, CORS, and Isolation)
Short answer: for a browser direct to storage upload from a Node.js SaaS frontend, use short-lived presigned PUT and GET URLs, but let the backend choose every tenant-scoped object key; compare S3-com...