Object Storage Events on Serverless Functions: File Processing Without Workers

That matters for SaaS teams because file work often begins as a simple app-server feature and later becomes production pressure. A user uploads a CSV, image, PDF, export, backup, or document. The app needs to validate it, resize it, convert it, scan it, extract metadata, create a thumbnail, update a database record, or trigger a downstream workflow. If all of that work runs inside the main app server, uploads can slow the product down.

Raff Technologies gives teams a cleaner path with Raff Functions: one standard handler can be wired to HTTP, cron, one-off runs, or object-storage events such as bucket uploads with prefix filters. Raff Object Storage can store the input and output files, while Raff Managed Databases can store metadata, job status, and durable records.

This guide explains when to use object storage events with serverless functions, when a VM worker is still better, and how to design file-processing workflows that are retryable, observable, and safe for production.

If you are still deciding where uploads should live, read App Uploads: VM Disk vs Object Storage for SaaS Teams first.

File uploads should not overload the app server

File uploads often look harmless at the beginning.

A small app lets users upload:

• Profile images
• Attachments
• CSV imports
• PDFs
• Reports
• Product images
• Documents
• Audio or video files
• Backup archives
• Data exports
• Signed files
• Generated artifacts

Then the app starts doing work after each upload:

• Validate file type
• Read metadata
• Resize images
• Generate thumbnails
• Convert formats
• Parse CSV rows
• Extract text
• Scan or classify content
• Create previews
• Update database records
• Send notifications
• Trigger imports
• Write processed output

That work can compete with the customer-facing app for CPU, memory, disk, and database connections.

A safer production pattern is:

User upload
  ↓
Object Storage
  ↓
Storage event
  ↓
Raff Function
  ↓
Processed output + database metadata

The app handles user flow. Object storage holds files. The function handles file work. The database records status and metadata.

This keeps upload processing out of the main request path.

The quick decision framework

Use this table before deciding between object-storage events, VM workers, app-server processing, or Kubernetes jobs.

A useful rule:

Use object-storage events when the file is the trigger. Use a worker VM when the processing environment is the product.

If a task starts because a file landed in a bucket, a function is often the cleanest first option.

Object storage events are strongest for bounded file work

Object-storage events work best when a file appears and a bounded task should run.

Good candidates include:

• Resize uploaded images
• Generate thumbnails
• Convert documents
• Extract PDF metadata
• Parse uploaded CSV files
• Validate file schema
• Check file size and MIME type
• Create report previews
• Store import status
• Move files from incoming to processed
• Notify users when processing finishes
• Update search metadata
• Trigger a follow-up workflow

A function can receive an event, read the uploaded object, process it, write output back to object storage, and update the database.

Example:

incoming/avatar.png
  ↓
Raff Function starts
  ↓
Create 128px, 512px, and 1024px versions
  ↓
Write outputs to processed/avatars/
  ↓
Update database with image paths

That design is easier to scale than doing image processing inside the web request.

The user upload can finish quickly, and the app can show a processing state until the function completes.

Prefix filters prevent accidental loops

Prefix filters are important for file-processing workflows.

Without a prefix filter, a function may trigger on every object in a bucket. That can cause accidental loops. For example, the function reads an uploaded image and writes a thumbnail. If the thumbnail lands in the same bucket and also triggers the function, the function may process its own output.

A safer pattern uses prefixes:

incoming/
processed/
failed/
archive/

For example:

incoming/customer-file.csv
  ↓ triggers function

processed/customer-file-normalized.csv
  ↓ does not trigger same function

A prefix-based design can separate file stages:

Raff Functions supports object-storage events such as bucket uploads with prefix filters. Use that feature to make event scope explicit.

Do not let output files retrigger the same workflow unless that behavior is intentional.

Store job status in a database

An object-storage event tells you a file arrived. It does not replace application state.

A file-processing workflow should store status in a database so the app can show progress and recover from failures.

A simple status model:

A clean flow:

Upload starts
  ↓
App creates database record
  ↓
File lands in object storage
  ↓
Function processes event
  ↓
Function updates database record

The app should not depend only on whether a file exists in a bucket. It should have a durable record that explains the file's current state.

This is especially important for SaaS apps with tenants, permissions, billing, imports, compliance, or customer-visible processing status.

Make file processing idempotent

Object-storage events can be delivered more than once. Users can upload the same file twice. A function can fail halfway through and retry. A developer can manually replay a job.

File-processing functions must be idempotent.

That means the same file event can run more than once without corrupting data or creating duplicate outputs.

Use these techniques:

Example:

if file.status == "processed":
    return success
else:
    process file and update status

This is better than assuming every event is unique.

Idempotency is not only a backend concern. It protects users from duplicate imports, duplicate notifications, duplicate invoices, or broken file state.

Return durable outputs to object storage

The function runtime should not be the final home for generated files.

Use object storage for:

• Thumbnails
• Converted files
• CSV exports
• Report PDFs
• Processed images
• Import result files
• Validation reports
• Transformed documents
• Batch artifacts
• Generated archives

A good output pattern:

incoming/report.csv
  ↓
processed/report-normalized.csv
  ↓
database output_key = processed/report-normalized.csv

The database stores metadata and object keys. Object storage stores the actual files.

This keeps compute stateless and makes retries safer. If a function fails, the app can inspect the database status and object storage paths to decide what happened.

For broader storage design, read Object Storage vs Block Storage vs VM Disk.

When a VM worker is still better

Not every file-processing job should be a function.

Use a VM worker when the processing environment matters more than the event trigger.

A Raff VM may be better when the workflow needs:

• SSH debugging
• Large system packages
• Persistent local cache
• Long-running workers
• Constant queue processing
• Heavy CPU all day
• Several coordinated processes
• Large local temporary storage
• Manual inspection during incidents
• Custom binaries or complex toolchains
• Existing Docker Compose services
• Stateful processing environment
• Predictable capacity-based cost

A VM worker pattern:

Object Storage
  ↓
Queue or database job table
  ↓
Worker VM
  ↓
Object Storage + database update

This is useful for continuous pipelines, large media processing, or workloads where developers need direct server access.

A function is best when the job starts and ends cleanly. A VM worker is best when the processing environment must stay alive.

Long-running file jobs need extra design

Some file tasks take longer than expected.

Examples:

• Large CSV imports
• AI document processing
• Multi-page PDF conversion
• Large report generation
• Video or audio conversion
• Many image variants
• Large archive validation
• Customer data migration

Raff Functions supports timeouts up to 1 hour by default and up to 24 hours on request, which makes longer file jobs possible as functions.

But long-running file jobs still need guardrails:

• Job status in database
• Progress markers
• Retry limits
• Idempotent output paths
• Chunking for large inputs
• Safe failure messages
• Logs at each stage
• Spend cap review
• Clear owner
• Manual replay path

If restarting from zero would be painful, split the work into chunks.

Example:

large-import.csv
  ↓
Function validates file
  ↓
Create chunk jobs
  ↓
Process chunks
  ↓
Write result summary

For deeper long-running design, read Long-Running Serverless Functions for AI, ETL, and Batch Jobs.

Logs and metrics make file events trustworthy

File events can fail in quiet ways.

A file may upload successfully, but processing may fail. A function may write output but fail to update the database. A bad file may retry repeatedly. A user may wait for an import that never completes.

A file-processing function should log:

• File ID
• Account or tenant ID
• Input object key
• File size
• Detected file type
• Processing stage
• Output object key
• Row count or image dimensions
• Validation errors
• Retry attempt
• Completion status
• Safe failure reason

Example log shape:

file_event_received file_id=file_123 key=incoming/report.csv
file_validation_passed file_id=file_123 size_mb=12
file_processing_started file_id=file_123
file_output_written file_id=file_123 output_key=processed/report.csv
file_processing_completed file_id=file_123 duration_ms=8421

Raff Functions includes logs and metrics for every invocation, with live log tail, search and level filters, 14-day retention, count, p50, p95, and error rate per function.

Use logs to explain the workflow without exposing sensitive file content.

Security and tenant boundaries matter

File uploads often contain sensitive data.

A file-processing function should not have broad access to every bucket, every prefix, or every database table unless there is a clear reason.

Use scoped access:

• Only required bucket
• Only required prefix
• Separate input and output paths
• Narrow database permissions
• Tenant-aware file records
• Safe logs
• Secrets outside code
• Validation before processing
• Access checks before user download

Raff Functions can bind to Raff Object Storage with scoped S3 keys per bucket and Raff Managed Databases with scoped per-function credentials. Use those scoped bindings to limit each function's access.

For SaaS apps, also check tenant boundaries:

• Does the file record belong to the right account?
• Is the output path tenant-specific?
• Can one tenant guess another tenant's file key?
• Does the app authorize downloads through database metadata?
• Are temporary files cleaned up?
• Are failed files quarantined?

A function should not process a file only because the object exists. It should confirm that the file belongs to the expected account and workflow.

Cost planning for object-storage events

Object-storage event cost depends on how often files arrive and how expensive processing is.

Estimate:

• Uploads per month
• Average file size
• Average processing duration
• Memory setting
• Active CPU behavior
• Retry frequency
• Number of output files
• Whether work can be chunked
• Whether processing is CPU-heavy or I/O-heavy
• Whether large files should use a VM worker

Raff Functions bills memory and active CPU. Requests and egress are free for functions. Raff Object Storage has its own storage and egress pricing, so file retention and download patterns still matter.

A function can be cost-effective for bursty file events. A VM worker may be easier to forecast if processing runs constantly.

A practical rule:

For the function cost model, read Serverless Function Pricing: CPU, Memory, Requests, and Egress.

A practical Raff object-event architecture

A clean Raff architecture separates upload, processing, state, and output.

User or system uploads file
  ↓
Raff Object Storage incoming/ prefix
  ↓
Raff Function triggered by storage event
  ↓
Raff Managed Database updates status and metadata
  ↓
Raff Object Storage processed/ prefix stores output
  ↓
App notifies user or shows result

Each layer has a clear job:

This pattern works for:

• SaaS app uploads
• CSV imports
• image processing
• PDF processing
• report generation
• document automation
• backup validation
• media workflows
• data enrichment
• internal file pipelines

Start with the simplest event-driven path. Add queues, worker VMs, or Kubernetes when the workflow becomes continuous or coordination-heavy.

Object-storage event checklist

Before launching a production file-processing function, check:

• The input bucket and prefix are defined.
• The output prefix is separate from the input prefix.
• The function cannot accidentally process its own output.
• The app creates a database file record.
• The function updates status and metadata.
• File type and size are validated.
• Tenant ownership is checked.
• Duplicate events are handled safely.
• The function is idempotent.
• Retry behavior is defined.
• Failed files have a status or prefix.
• Logs include file ID, key, stage, and result.
• Logs do not expose sensitive file content.
• Credentials are scoped to the required bucket or prefix.
• Large jobs have chunking or progress markers.
• Cost is estimated before launch.
• The team knows when to use a worker VM instead.

This checklist prevents file-processing functions from becoming hidden production risk.

Common mistakes to avoid

Triggering on every object in a bucket

Use prefix filters.

Do not let processed outputs retrigger the same function by accident.

Processing files inside the web request

User uploads should not wait for heavy processing.

Upload the file, create a record, trigger processing, and show status.

Storing outputs only in the function runtime

Generated files should go back to object storage.

The database should store metadata and output paths.

Ignoring duplicate events

Storage events can repeat.

Use file IDs, object keys, hashes, and database status to prevent duplicate processing.

Giving the function broad storage access

Scope credentials to the required bucket or prefix.

A file processor should not have access to unrelated storage.

Skipping tenant ownership checks

A SaaS app should confirm that a file belongs to the expected tenant before processing or exposing results.

Using functions for constant heavy processing without checking cost

If the pipeline runs all day, a worker VM or Kubernetes job may be cleaner and easier to forecast.

File events should turn uploads into workflows

Object-storage events are useful because they turn a file upload into a clear workflow.

Use Raff Functions when file processing is event-driven, bounded, isolated, and should not slow the main app server. Use Raff Object Storage for input files, outputs, artifacts, and archives. Use Raff Managed Databases for file records, tenant ownership, status, metadata, and output paths. Use Raff VM when file processing needs a persistent worker, SSH debugging, custom binaries, or always-on capacity.

The safest Raff pattern is simple: uploads land in object storage, a function processes the event, the database records state, and outputs go back to object storage.

That keeps file workflows clean, observable, and easier to scale without overloading the app server.