We are currently using Pega Mashup code to allow users to upload Media (photos and videos) up to 100mb in size to our Pega application.  At the moment the application is temporarily storing an uploaded file in the clipboard then sending to a virus scanner to determine if clean or not.  If clean it writes to S3 storage.  If not, it is discarded.

I'm looking at ways to improve and possibly not having it land in Pega at all. 

Would prefer that the uploader send directly to S3 (and later directly to GCS instead) and have the files land there. 

Have out application just keep track of the names of the uploaded files.  Then we can have the Virus scanning tools directly scan the files.  Either have them land where they will be with no access or links to it until confirmed clean, or let them land in a separate bucket, scan them there, then move to the normal media storage and link to the files. 

Looking at decoupling the virus scanning so the users can go on and use the application as soon as the file is uploaded.  Then it will just be pending until scanned then activate the links so they can be used.

How are other handling media uploads and virus scanning?  What scanning tools do you use?  Any published patterns that match what we're looking to do?

Any suggestions appreciated.