All the company's storage, behind one door that keeps a log

Ten years of company storage: three S3 buckets, two Google Workspace drives, an SFTP box nobody admits to owning, a WebDAV share from an acquisition.

Mount each one as a backend in a single container. Now every read goes through one HTTP interface: same paths, same ?backend= switch: and because every access is an HTTP request, every access is loggable. Proxy permissions sit in front: IP whitelist for the office, JWT for the audit tooling.

The alternative was per-provider IAM archaeology, four audit trails in four formats, and hoping the SFTP box logs anything at all.

Storage sprawl gets a single door, and the door keeps a log.