From Dev.to
S3-Compatible Avatar Uploads: Metadata, Retention, and Cross-Provider Image Processing
Short answer: Upload the validated avatar to private S3-compatible storage, store its object key and metadata in your database, and let a tenant-scoped deletion workflow remove both the source and eve...