Canva Shares S3 Based Architecture for Session Revocation Across Hundreds of Millions of Sessions
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Canva's S3-based session revocation architecture is a practical, scalable design pattern for cloud engineers.
Canva redesigned session revocation for hundreds of millions of sessions using Amazon S3 as a coordination primitive, storing 30-minute immutable revocation chunks as 16-byte binary records. Gateways use conditional GETs to download changed chunks and maintain in-memory indexes, eliminating networked database lookups for most authentication requests. The shift cut the revocation cache memory footprint by 87.5%, reduced MySQL to two read replicas, and improved deployment speed by avoiding coordinated database load during cache rebuilds.