I am new to the concept of security. I have a simple image server that takes in username and an image to be uploaded. Given a username on a different URL, all images can be viewed as a slide-show on the browser. The image is stored in the S3, and the URL to the image in S3 is stored in database in RDS. I was shortlisting all security measures that need to be taken. I would like to know more points if i missed.
- HTTPs connection for file encryption.
- Encryption of image while uploading/downloading (is it mandatory or overkill) ?
- What database security / Access controls measures are required if any ?