S3 is the 'Swiss Army Knife' of AWS. It's an object storage service designed for 99.999999999% (11 nines) of durability.
Everything in S3 is an 'Object' stored in a 'Bucket'. **Architect Pattern:** Never store user-uploaded files on your app server's disk. Always stream them directly to S3. This allows your app servers to remain stateless and scale freely.
- **Standard:** Frequently accessed data.
- **Intelligent-Tiering:** Automatically moves data to save costs.
- **Glacier Deep Archive:** For long-term backups (cheapest, but takes hours to retrieve).
Q: "How do I secure private files in S3?"
Architect Answer: "Use **Pre-signed URLs**. Instead of making the bucket public, your .NET API generates a temporary link that is valid for, say, 10 minutes. The user downloads the file directly from S3 using that link. This offloads the bandwidth cost to S3 and keeps your data 100% secure."