The way I structure it is like this user_media/profile/{userId}/{itemId}, and we all know that if we try to download an s3 URL, the key would always appear in the URL, whether it be signed or not.
How do I deal with this? exposing userId seems like a bad idea, especially since it’s the source of truth on my database. Should i just do user_media/profile/{itemId} but it makes user specific objects difficult to track.
1