A company is developing a web application that allows its employees to upload a profile picture to a private Amazon S3 bucket. There is no size limit for the profile pictures, which should be displayed every time an employee logs in. For security reasons, the pictures cannot be publicly accessible. What is a viable long-term solution for this scenario?

Questions on how to write code and design scalable applications, implement application security and testing, and on AWS components such as S3, Dynamo DB, Elastic Beanstalk, and CloudFormation.