病毒扫描：存储与安全设计
要求在上传的对象可下载之前获得清洁的扫描器判定，隔离扫描失败或超时的对象，并定义疑似扫描器受损时的隔离和重新扫描步骤。
Specifies server-side request forgery controls using allowlisted schemes and hosts, resolve-then-recheck DNS, blocking of link-local and cloud metadata destinations, and a ban on using caller URLs as an open proxy.