Canva Asset Hub — Jay Yoon

What it does

Built for real enterprise workflows

Large marketing teams manage thousands of approved assets in S3. This eliminates the manual middle step.

⚡

Event-driven, zero manual work

S3 PutObject fires EventBridge, which triggers Lambda, which calls Canva — all without a human touching anything.

🤖

AI tagging that actually means something

Amazon Bedrock generates business-context tags like brand_tier: premium and approved_for: social_media — not just "beach" or "sunset".

🔄

It goes both ways

Canva Webhooks push finished designs back to S3. The loop closes automatically — from raw asset to published design and back.

Architecture

How it's built

Serverless, event-driven AWS infrastructure + Canva Connect API. Toggle between phases.

S3 → EventBridge → Lambda → Canva Connect API

S3 Bucket

Asset store

→

PutObject

EventBridge

Event rule

→

invoke

Lambda

Upload handler

→

HTTP POST

Canva API

Upload + poll

→

logs

CloudWatch

Observability

Forward: S3 → Bedrock → Lambda → Canva · Reverse: Canva → API Gateway → S3

Forward Sync — S3 → Canva

S3 Bucket

Asset store

→

PutObject

EventBridge

Event rule

→

invoke

Bedrock

AI tagging

→

🪣 S3 Trigger

PutObject event fires on image upload
EventBridge rule filters by prefix & suffix
Supports PNG, JPG, SVG

λ Lambda Handler

Generates presigned URL for S3 object
Initiates Canva async upload job
Polls until status = success

🎨 Canva Integration

OAuth 2.0 PKCE token flow
Async upload + job polling pattern
Asset lands in Canva Brand Kit

📊 Observability

CloudWatch structured logging
Success / failure metrics
Lambda duration tracking

API Reference

Endpoints

Backend REST API (API Gateway + Lambda) plus key Canva Connect API endpoints.

✅ Phase 1 — Implemented · Canva Connect API (S3 → Canva Pipeline)

POST /v1/asset-uploads Initiate async asset upload (returns job ID) ▾

Auth — OAuth 2.0 PKCE · Scope: asset:write

Header	Value
Authorization	Bearer {access_token}
Asset-Upload-Metadata	JSON with `name_base64` — filename Base64-encoded e.g. `{"name_base64": "b2NlYW5fMS5wbmc="}`
Content-Type	application/octet-stream

Example Response

{
    "job": {
      "id": "ded634f4-650c-4a16-8317-06ae058731fd",
      "status": "in_progress"
    }
}

GET /v1/asset-uploads/{job_id} Poll upload job until complete ▾

Polling Pattern (Python — Lambda)

# Poll every 3s until status == "success" (max 10 attempts)
  for attempt in range(10):
      time.sleep(3)
      res = canva_get(f"/v1/asset-uploads/{job_id}")
      status = res["job"]["status"]
      if status == "success":
          asset_id = res["job"]["asset"]["id"]
          break
      elif status == "failed":
          raise Exception("Upload failed")

Example Success Response

{
    "job": {
      "id": "ded634f4-650c-4a16-8317-06ae058731fd",
      "status": "success",
      "asset": {
        "id": "MAHDuGNfRwQ",
        "name": "snowy_mountain_3.jpg",
        "type": "image"
        ...: "..."
        }
    }
}

GET /v1/users/me Validate token + retrieve user profile ▾

Used for OAuth token validation (Day 1)

{
    "team_user": {
        "user_id": "oUgaASGNYnVze12572GURM",
        "team_id": "oBZGQiMnI_1xoCp&NSB2GQ"
    }
}

✅ Phase 2 — Implemented · Backend REST API (API Gateway + Lambda)

POST /sync/trigger Manually trigger S3 → Canva sync ▾

Request Body

Parameter	Type	Required	Description
s3_bucket	string	required	Source S3 bucket name
s3_key	string	required	Object key (path to asset)
canva_folder_id	string	optional	Target Canva folder — defaults to root
ai_tagging	boolean	optional	Enable Bedrock tagging before upload

Example Response

{
    "job_id": "sync_a1b2c3d4",
    "status": "PROCESSING",
    "canva_upload_job_id": "CUJ_xxxxx",
    "ai_tags_generated": true
}

GET /sync/status/{job_id} Poll sync job status and result ▾

Example Response

{
    "job_id": "sync_a1b2c3d4",
    "status": "COMPLETE",
    "canva_asset_id": "BABXy1234",
    "ai_tags": {
      "brand_tier": "premium",
      "campaign_type": "seasonal",
      "approved_for": ["social_media", "web"]
    }
}

GET /assets List all synced assets from DynamoDB ▾

Query Parameters

Parameter	Type	Required	Description
status	string	optional	Filter: COMPLETE \| PROCESSING \| FAILED
limit	integer	optional	Max records. Default: 50
next_token	string	optional	Pagination cursor

POST /webhooks/canva Canva Webhook receiver — triggers reverse sync ▾

Canva Webhook Payload

{
    "event_type": "DESIGN_PUBLISH",
    "design_id": "DAF1234abcd",
    "export_url": "https://export.canva.com/...",
    "timestamp": "2025-06-01T12:30:00Z"
}

✅ Phase 2 — Implemented · Amazon Bedrock (AI Tagging — Claude Haiku 4.5)

POST bedrock-runtime · invoke_model Business-context metadata generation before upload ▾

Why Bedrock? (vs Canva Smart Tags)

Capability	Canva Smart Tags	Bedrock (planned)
Visual labels (beach, sunset)	✓ Yes	✓ Yes
Brand tier classification	✗	✓ Custom schema
Campaign suitability tags	✗	✓ Prompt-engineered
Pre-upload processing	✗ Post-upload only	✓ Runs before upload
Customisable schema	✗	✓ Fully customisable

Brand assets,
synced automatically

Built for real enterprise workflows

Event-driven, zero manual work

AI tagging that actually means something

It goes both ways

How it's built

🪣 S3 Trigger

λ Lambda Handler

🎨 Canva Integration

📊 Observability

🤖 Bedrock Tagging

🔄 Reverse Sync

🗄 Data Layer

🔐 Auth & UI

Endpoints

Try it yourself

Trigger a sync

Pipeline log

Brand assets, synced automatically

Built for real enterprise workflows

Event-driven, zero manual work

AI tagging that actually means something

It goes both ways

How it's built

🪣 S3 Trigger

λ Lambda Handler

🎨 Canva Integration

📊 Observability

🤖 Bedrock Tagging

🔄 Reverse Sync

🗄 Data Layer

🔐 Auth & UI

Endpoints

Try it yourself

Trigger a sync

Pipeline log

Brand assets,
synced automatically