Live App →

S3

Object storage for document binaries, reports, and static assets.


Buckets

Bucket Purpose Lifecycle
cwt-{env}-uploads Document binaries 7-year retention
cwt-{env}-reports Generated PDF/PPTX/Excel 3-year retention
cwt-{env}-assets Static assets Indefinite
terraform-iac-data Terraform state Versioned

Security

  • Public access: Blocked on all buckets
  • Encryption: AES-256 (SSE-S3)
  • Versioning: Enabled on uploads and reports
  • CloudFront OAC: For static asset delivery