AWS Architecture

The architecture seen below supports the object flow as described above both in a single region as well as across all regions supported (for more info checkout the warning under the Enabling Buckets in Other Regions section). The Console region will have all components deployed to it. Any additional region only requires the scanning Agent which will report back to the centrally located Console.
AWS Architecture, antivirus for Amazon S3
Multi-Region Architecture
Image

Platform Services

While many services are used (ECS Fargate, App Config, CloudWatch, CloudFormation, DynamoDB, SNS, SQS, IAM) to deliver the Antivirus for Amazon S3 solution, two will be called out here. CloudWatch and IAM are leveraged for logging and permission respectively. These are the usual questions we get from customers: how do I check the logs and what all are you doing behind the scenes (permissions wise).

We wanted to make sure you had those bases covered.