_:n837d3bf5e01e4dd78ddbbfb333f7403bxb7
<http://schema.org/text>
"Ah yes, I already generate a policy so only signed in users can upload files to our S3 buckets. And files that aren't attached to a saved database entry (e.g. a comment) are automatically pruned.\r\n\r\nSo I _think_ things are pretty safe as is. Just wondering if there are any best practices otherwise."
<https://wip.chat/questions/what-s-the-correct-cors-configuration-for-allowing-direct-uploads-in-s3>