No, we use presigned URLs and uploads happen on the client

[_Related HN comment_](https://news.ycombinator.com/item?id=40209212)

Also, holy shit, you can just spam the S3 URL with garbage and drive up someone’s bill? Better hope you keep your URLs secret.

security

How an empty S3 bucket can make your AWS bill explode

StillStackinAfterAllTheseYears

Also, holy shit, you can just spam the S3 URL with garbage and drive up someone’s bill? Better hope you keep your URLs secret. 

@ek do we proxy through the SN API for S3? 