Standard modern cloud architecture:
- AWS SQL Server engine
- Azure API Service (C# ASP.NET Web API 2)
- Angular front end application
I'm trying to figure how to secure documents that are uploaded so that they can only be accessed via the API layer and not open to the public (or a one-time link which is produced by some cloud storage service that the API returns). Does anybody have any experience with such a scenario?
These 2 seem like they may help:
No idea if this is right and no experience with the security side of it.....
Much appreciated for anybody that helps!