A media company hosts a web application on AWS.

Configure the application to generate IAM temporary security credentials for authenticated users.

Create an AWS Lambda function that generates pre-signed URLs when a user authenticates.

Develop a custom authentication service that integrates with Amazon Cognito to control and log direct S3 bucket access through the application.

Use AWS Security Token Service (AWS STS) to assume a pre-defined IAM role that grants authenticated users temporary permissions to upload videos directly to the S3 bucket.