[bit_bear]

I’m pretty sure you’re describing things AWS Gateway is all capable of. It can proxy s3 to allow public download and can create user pools in cognito for auth