Skip to content
smallPict
Start free
HomeCloud providersAmazon Web Services (AWS)

Production-ready BYO-storage (S3) & BYO-CDN (CloudFront) integration

Connect your existing Amazon S3 buckets and CloudFront distributions directly with SmallPict. Transform images at the edge, store optimized AVIF/WebP assets into S3, and deliver them globally through CloudFront with 0% vendor lock-in.

Connect Amazon Web Services (AWS)Read CDN architecture guide

BYO-storage & BYO-CDN

Egress per image
Lower
CloudFront locations
600+
Asset durability
99.999999999%

Infrastructure figures are Amazon Web Services (AWS)'s published specifications. Savings from smaller files depend on your images.

Amazon Web Services (AWS) + Cloud CDN Integration

How your cloud storage, SmallPict's conversion step and the CDN fit together.

Dedicated storage origin

Amazon Simple Storage Service (Amazon S3) is an industry-standard cloud object storage service providing eleven nines of data durability, fine-grained access control, and infinite elastic scalability.

SmallPict ephemeral engine

SmallPict is an image optimization platform. It picks up image uploads, converts them to AVIF and WebP in memory, strips unneeded EXIF metadata, resizes them, and writes the optimized files straight to your cloud storage bucket.

Global edge CDN delivery

Amazon CloudFront is a content delivery network with edge locations around the world, origin shielding, TLS termination and edge caching for S3 files.

Visual architecture & integration flow

Your images are converted in memory, saved to your bucket and served from the CDN.

  1. 1 · Client / CMS origin

    Upload & interception

    Assets are uploaded via WordPress plugin, web application, or REST API.

  2. 2 · SmallPict ephemeral engine

    Ephemeral optimization

    SmallPict transcodes to AVIF/WebP, resizes dimensions, and strips metadata in isolated, encrypted processing.

  3. 3 · Amazon S3 Bucket

    Direct bucket stream

    Optimized files stream straight into your private or public Amazon S3 bucket.

  4. 4 · Amazon CloudFront

    Global edge caching

    Cached across global PoPs with immutable 1-year Cache-Control headers.

  5. 5 · End-user browser

    Delivery

    Visitors receive next-gen images from the nearest edge location.

  • Nothing kept on SmallPict servers
  • 1-Year immutable edge cache headers
  • Files stay in your cloud account

How to Connect Amazon Web Services (AWS) to SmallPict

A 4-step setup guide to provision buckets, configure least-privilege credentials, connect endpoints, and verify edge delivery.

  1. Provision Dedicated Amazon S3 Bucket

    Create a dedicated bucket or container in your Amazon Web Services (AWS) console (Standard storage class recommended).

    Tip: Keep the bucket private; public access is not required.

  2. Configure IAM / scoped credentials

    Generate AWS Access Key ID & Secret / IAM Role with least-privilege permissions strictly scoped to read and write objects in your bucket.

    Tip: Only PutObject and GetObject permissions are required.

  3. Link endpoint in SmallPict dashboard

    Enter your bucket name, region, endpoint, and API credentials into the SmallPict BYO settings panel.

    Tip: Credentials are encrypted at rest with AES-256 GCM.

  4. Test & verify edge asset delivery

    Upload a test asset or run an automated URL verification. Check response headers for Content-Type: image/avif and CDN cache HIT status.

    Tip: Verify Cache-Control: public, max-age=31536000, immutable.

SmallPict BYO config payload
{
  "provider": "aws_s3",
  "bucket": "my-company-assets-prod",
  "region": "us-east-1",
  "cdn_domain": "d111111abcdef8.cloudfront.net",
  "auto_format": ["avif", "webp"],
  "cache_control": "public, max-age=31536000, immutable"
}

Built for scale, traffic surges & media libraries

How different kinds of apps use SmallPict with Amazon Web Services (AWS) to handle their images.

E-commerce

E-commerce stores

High-res catalog galleries in Amazon S3

Optimize product images, thumbnails, and zoom galleries stored in Amazon S3 before global CDN delivery. Speeds up page rendering, reduces bounce rates, and boosts mobile conversion.

Much lighter catalog pages

Media

Media & publishing

Large photo libraries, no restructuring

Convert editorial archives and photography to AVIF or WebP without changing your Amazon S3 folder structure.

Simpler editorial workflow

Scale

High-traffic websites

Origin shielding during viral spikes

Shrink asset payloads substantially while keeping Amazon Web Services (AWS) as your authoritative origin. Protects storage from excessive bandwidth charges during traffic surges.

Repeat requests answered from the CDN edge

Global

Multi-region applications

Global delivery across continents

Combine multi-region Amazon S3 buckets with Anycast CDN edge caching so images load fast for users across the Americas, Europe and Asia.

Served from the edge closest to each visitor

Why Use SmallPict with Amazon Web Services (AWS)?

5 strategic architectural advantages designed to eliminate vendor lock-in, reduce latency, and lower operational overhead.

Much lighter

Reduce image payload

Converts PNG and JPEG to AVIF and WebP with no visible quality loss. How much smaller depends on the image.

Your own bucket

Keep your existing storage

Bring your own storage: SmallPict writes straight into your Amazon S3 bucket, so your files never move to a closed platform.

Edge delivery

Global edge delivery

Maximize edge cache hit ratios with long-lived immutable cache headers across Amazon CloudFront global points of presence.

Automatic

Automated optimization

Images convert in the background on upload or batch sync. No manual resizing or scripts.

Full control

Infrastructure control

You retain complete ownership, access control policies, IAM boundaries, and compliance governance over your assets.

Ready in 5 mins

Drop-in integration

Connect through the WordPress plugin, the API or the dashboard. No changes to your infrastructure, code or database schema.

Security, privacy & access control

Does SmallPict keep or store copies of my files?

Not when you bring your own storage. Images are processed in isolated, encrypted processing storage, and the optimized files are written straight to your Amazon S3 bucket. Your files live in your own account: you keep your originals and are responsible for those copies, and SmallPict does not keep a backup of them.

No copies kept after conversion

Least-privilege IAM

SmallPict requires only bucket-scoped read and write permissions (e.g. PutObject / GetObject). We never request or require administrative, project-wide, or account-wide credentials.

Private bucket support

Your Amazon S3 buckets do NOT need to be public. SmallPict writes directly using authenticated API calls, and asset delivery is routed securely via CDN Origin Access Control or signed origins.

AES-256 encryption

All API tokens and credentials stored in SmallPict are encrypted at rest using AES-256 GCM envelope encryption and never logged in plaintext.

Customer sovereignty

The files stay yours. You can revoke credentials or rotate keys at any time in your Amazon Web Services (AWS) console.

Supported Configuration for Amazon Web Services (AWS)

Verify compatibility across cloud storage tiers, bucket configurations, regional topologies, and edge delivery options.

Configuration & featureSupport statusTechnical details
Cloud object storageSupportedFull native integration with Amazon S3
Multi-region bucketsSupportedGeo-redundant storage supported
Regional bucketsSupportedLocal datacenter storage supported
Standard storage classSupportedOptimal performance tier
Edge CDN accelerationSupportedAmazon CloudFront delivery
Delivery domainSupportedManaged in your own CDN account
Private bucket supportSupportedOrigin access restriction enabled
Least-privilege scoped credentialsSupportedAWS Access Key ID & Secret / IAM Role
Immutable cache-control headersSupportedmax-age=31536000, immutable
Automatic AVIF / WebP negotiationSupportedDynamic Accept header support

Image Optimization for Amazon Web Services (AWS)

Technical specifications covering AVIF, WebP, compression algorithms, responsive dimensions, and cacheability.

AVIF format

Much smaller than JPEG/PNG

AVIF (AV1) encoding

AVIF uses AV1 keyframe compression, which gives the best quality for its file size of any format browsers support today.

WebP format

Smaller than JPEG/PNG at the same visual quality

Universal modern compatibility

Supported in all current browsers, with alpha transparency kept and perceptual quantization.

Edge caching

1-year edge cache

Immutable cache-control

Automatically attaches public, max-age=31536000, immutable to maximize edge retention.

  • 1-Year immutable CDN edge caching to prevent redundant origin requests
  • Automatic browser format negotiation via HTTP Accept headers
  • Responsive downscaling with srcset width descriptors
  • Faster Largest Contentful Paint (LCP)

Lower egress bills from smaller files

Why optimizing image weight directly lowers your cloud provider monthly invoice without paying inflated SaaS CDN markups.

Without SmallPict (raw media)

Heavy egress bandwidth & slower pages

Raw, unoptimized JPEG/PNG images (2.5MB–5MB each) consume excessive storage and drive heavy outbound egress bandwidth charges from Amazon Web Services (AWS).

  • Heavy 2.5MB - 5MB original image weights
  • Full cloud provider egress bandwidth charges
  • Higher LCP latency impacting Google search rankings

With SmallPict + Amazon Web Services (AWS)

Lower egress bandwidth bills from your cloud provider

Smaller payloads mean less outbound data transfer, which lowers your cloud provider egress bill every billing cycle.

  • Images served from Amazon CloudFront Edge CDN edge locations close to your visitors
  • You pay Amazon Web Services (AWS) directly at its own cloud rates, with no markup from a closed image CDN.
  • Year-long cache headers, so the CDN answers repeat requests from the edge

Frequently asked questions

Clear technical answers regarding Amazon Web Services (AWS) storage integration, CDN cache headers, security policies, and performance.

What is Amazon S3 + Amazon CloudFront Integration?

Amazon S3 keeps your files, and Amazon CloudFront serves cached copies from the edge locations closest to your visitors. SmallPict sits in between and compresses images before they are stored and delivered.

Can SmallPict optimize images stored in Amazon S3?

Yes. SmallPict connects directly to your Amazon S3 buckets. It compresses JPEG, PNG, and WebP assets, converts them to AVIF and WebP, and stores the optimized files directly inside your bucket.

Does SmallPict work with Amazon CloudFront?

Yes. When SmallPict streams optimized images to Amazon S3, it attaches long-lived HTTP caching headers (Cache-Control: public, max-age=31536000, immutable). Amazon CloudFront caches these assets at the edge and answers repeat requests from there.

Can I use a private Amazon S3 bucket?

Absolutely. SmallPict does NOT require your bucket to be public. SmallPict writes directly using authenticated API calls, and public delivery is handled securely via CDN Origin Access Control or private origin configurations.

Does SmallPict require Amazon Web Services (AWS) administrative credentials?

No. SmallPict operates on least-privilege principles and only requires credentials (AWS Access Key ID & Secret / IAM Role) with scoped permissions strictly restricted to reading and writing objects within your specific target bucket.

Can I use a multi-region Amazon S3 bucket?

Yes. SmallPict fully supports multi-region, dual-region, and regional bucket configurations. SmallPict will push optimized assets to whichever endpoint you configure in your SmallPict dashboard.

Does SmallPict alter or overwrite my original images?

By default, SmallPict generates modern optimized formats (.avif and .webp) alongside your original master files, preserving your original images untouched unless you explicitly configure in-place replacement.

Where are optimized images stored?

All optimized images are stored directly in your own Amazon S3 bucket, in your own account. With BYO storage you keep your originals and are responsible for those copies; SmallPict does not keep a backup of them.

Does SmallPict support WebP and AVIF formats?

Yes. SmallPict natively encodes both AVIF and WebP, which are typically much smaller than JPEG. When delivered through Amazon CloudFront, assets are served dynamically according to the visitor's browser support.

How does caching work after image optimization?

SmallPict injects Cache-Control: public, max-age=31536000, immutable headers into every stored asset. This tells Amazon CloudFront edge nodes and client browsers to cache the image for up to one year, so repeat requests rarely reach your origin and origin transfer fees stay low.

Keep your storage, control your egress bill

Deploy SmallPict with Amazon Web Services (AWS). Keep your media assets inside your own cloud account while enjoying automated AVIF/WebP encoding and global edge acceleration.

Start BYO setupView documentation