How to Serve Private Assets - Proxy, presigned URL, CloudFront, WAF
Private files in the browser: proxy, presigned URL, CloudFront signed URL, and OAC with WAF, compared by who checks access. A 200MB file tests the proxy myth.

Private files in the browser: proxy, presigned URL, CloudFront signed URL, and OAC with WAF, compared by who checks access. A 200MB file tests the proxy myth.

Can JSONL on S3 be queried without Parquet? Range search, a B-tree, and an LSM tree, timed on a real bucket. It works. Parquet still wins on upkeep.

Inside a Parquet file: columns, row groups, pages, and the footer. Animations of min/max and Bloom filters pruning groups, then Range fetching the slices.

Grouping 10,000+ notifications makes chunk jobs finish out of order. waiting-children keeps one group and one send; invariants check the five races closed.

Delivery-history JSON in S3 is hard to query. Four options on infrastructure, query cost, and freshness, and why nightly Parquet conversion won.