Secure Admin Sign-In for Database Results

Overview

This project was built as part of a web-based RSVP system for a private event, specifically my son’s first birthday party. Guests could submit their responses through a public-facing form, and those submissions were stored in a cloud database for later retrieval.

What began as a simple event website became a useful exercise in applying secure system design to a small real-world problem: how to retrieve submitted data easily without exposing the database or relying on direct AWS console access.

Challenge

The public RSVP flow worked, but retrieving the submitted data required logging into AWS tools directly. That was inconvenient for a simple administrative task and created unnecessary friction for the only two intended admins.

At the same time, exposing a public endpoint for viewing submissions was not acceptable, since the site contained guest information such as names, attendance counts, dietary preferences, and submission timestamps.

• allow browser-based access to submitted RSVP data
• require authentication before any data retrieval
• avoid exposing database infrastructure or public query access

Approach

I designed the retrieval flow as a layered security-aware system rather than simply adding a hidden page. The public RSVP form remained open for guest submission, while administrative access was separated behind a visible “Admin Sign-In” path in the interface.

The secure retrieval workflow used:

• AWS Cognito for authentication
• API Gateway as the controlled request entry point
• Lambda for server-side retrieval logic
• DynamoDB for RSVP data storage

After successful login, the system automatically executed a single predefined retrieval pattern and displayed all RSVP records in the browser. Because the expected number of results was small, this kept the implementation simple while still preserving clear security boundaries and avoiding unnecessary query flexibility.

My Role

I built the system end-to-end, covering both the public RSVP experience and the secure administrative retrieval flow.

• designed and built the RSVP submission form
• defined the stored response structure, including required and optional fields
• implemented AWS Cognito-based authentication
• configured the API and Lambda retrieval path
• built the browser-based results page for authorized admins
• designed the overall security-aware workflow and architecture

Outcome

The finished system made RSVP data accessible through a simple authenticated browser workflow, eliminating the need to use AWS console tools for routine retrieval while still keeping the data protected behind managed authentication and server-side access control.

• improved usability for administrative data retrieval
• kept guest information behind an authenticated workflow
• demonstrated how security concepts can be applied in a practical, user-friendly system

It also highlighted a useful future enhancement: duplicate submissions were stored as separate records rather than updating an existing response. That was acceptable for the project scope, but it revealed an opportunity to add update logic in a future iteration.