Virus and malware when uploading files

We want to let our delivery partners upload files. Type can be word, ppt, excel, text, pdf, png and jpeg images, or zip files which have files of these types.

The request will go through our AWS Gateway, then hit out ec2 box. Should we place a AWS firewall before the gateway or after?

I read about s3 virus scan. What does that scan for vs what the firewall scans? Right now our solution skips s3 as the final storage of the files is elsewhere in our AWS cloud. Can we instead scan using the AWS service while keeping the file in RAM memory? or on Elastic File system?

Also are there any records of maximum time a 10 MB file will be in queue and scanned by the antivirus? Is the call synchronous?

We need to respond back to the user so we are concerned about lag and time outs. Wondering if we should upload file, store in memory or temp s3 location, send sync response to called and then scan, and send final notification after file is imported in to the system or rejected due to virus scan flagging.

Leave a Comment