From Dev.to
Web File Upload Explained: Python Presigned URL vs Proxy Backend Security
Short answer: use a presigned URL for the browser-to-storage byte path, but keep snapshot creation, tenant authorization, retention assignment, and deletion behind a Python control plane; choose a pro...