Architecture Visual

Complete production architecture for the Biometric Scan App, from static app delivery through secure identity checks, serverless processing, and verified-result storage.

Delivery and Frontend

BrowserUser BrowserUploads live scan and reference image
Amazon CloudFrontCloudFront CDNGlobal delivery for biometric app path
Amazon S3S3 Static Hostingfrontend UI, scripts, and assets

Auth and API Routing

Amazon CognitoAmazon Cognitooptional sign-in and scoped token access
Amazon API GatewayAPI Gateway HTTP APIverify and upload related endpoints
AWS LambdaLambda Functionsvalidation, compare logic, response payloads

Verification and Persistence

Amazon RekognitionAmazon Rekognitionface comparison and confidence scoring
AWS LambdaLambda Runtimethreshold checks + status mapping
Amazon DynamoDBDynamoDB + S3verification metadata and image records

Sensitive operations run server-side in Lambda. API access is controlled through IAM and token-based authorization, and verification outputs are persisted for auditability.

Hosting layer: CloudFront and S3 serve the biometric UI and static assets efficiently.
Auth layer: Cognito can enforce authenticated access where verification data must be user scoped.
Compute layer: API Gateway routes requests to Lambda functions that orchestrate verification workflows.
ML service layer: Rekognition performs face matching and returns confidence results to Lambda.
Data layer: DynamoDB and S3 hold verification records and related object data.
Security posture: Credentials and service permissions stay server-side with least-privilege IAM.
Back to App Back to Portfolio