The encoder container / lambda would had been spawned for that particular user and it would have permissions to access only the content of that specific user.