Architecture Visual
Complete production architecture for the Biometric Scan App, from static app delivery through secure identity checks, serverless processing, and verified-result storage.
Delivery and Frontend

User Browser
Uploads live scan and reference image
→

CloudFront CDN
Global delivery for biometric app path
→

S3 Static Hosting
frontend UI, scripts, and assets
Auth and API Routing

Amazon Cognito
optional sign-in and scoped token access
→

API Gateway HTTP API
verify and upload related endpoints
→

Lambda Functions
validation, compare logic, response payloads
Verification and Persistence

Amazon Rekognition
face comparison and confidence scoring
↔

Lambda Runtime
threshold checks + status mapping
→

DynamoDB + S3
verification metadata and image records
Sensitive operations run server-side in Lambda. API access is controlled through IAM and token-based authorization, and verification outputs are persisted for auditability.
Hosting layer: CloudFront and S3 serve the biometric UI and static assets efficiently.
Auth layer: Cognito can enforce authenticated access where verification data must be user scoped.
Compute layer: API Gateway routes requests to Lambda functions that orchestrate verification workflows.
ML service layer: Rekognition performs face matching and returns confidence results to Lambda.
Data layer: DynamoDB and S3 hold verification records and related object data.
Security posture: Credentials and service permissions stay server-side with least-privilege IAM.