Staff sign-in
Access is limited to invited staff. An authenticator-app code is required.
Authenticated with MFA
Welcome, staff member
Your browser session can call protected portal APIs with a Cognito token.
Select “Verify session” to test the protected API.
Portal tasks
Add your internal task endpoints under /api/. API Gateway verifies the Cognito token and the Lambda verifies staff membership.
Temporary AWS credentials
Create one-hour, least-privilege credentials for AWS SDK or SigV4 requests.