CSS Antivirus for S3

Use CSS AV integration when files must be scanned in staging before being copied to prod/app bucket.

High-level steps

  1. Enable bucket protection for the staging bucket in CSS console.

  2. Add staging bucket filter for proactive notifications.

  3. Verify event notifications and sync Lambda mapping.

  4. Configure deletion sync Lambda and removal event notification.

  5. Validate create/delete propagation from staging to prod.