Is it safe to store harmful files to storage like AWS S3?
I am new to security topics, please don't assume knowledge and spare no details if you're able to answer my questions.
I am trying to design a system that performs the basic functionality of virusTotal. Basically I want users to upload files. I will then extract metadata - use some engines to scan the file , and provide the user with a final report including metadata.
I want to store these files forever, if possible. My first instinct for the storage choice was amazon s3. My questions:
Some of these files are harmful, is it ok to store them in s3? e.g
could an executable cause damage just by being put in s3?Should I store harmful and unharmful files separately?
Is there anything I should do before storing these potentially harmful files? e.g perhaps trying to encrypt them or something?