[sigi45]

S3 has an api and there are libraries out there how to use it. It has access policys, access tokens with different permission level. Everything you have but better.

Now what you don't have, is a client software which allows any employee to use your storage system easy.

Only a WebAPI is not enough. I would even prefer any S3 open source self hosting solution over your solution and put a backup strategy behind it.