Lead intelligence,
from signal to action.
Connected
Architecture — request path
Architecture — daily GDPR compliance path
Problem
Sales teams needed a fast way to generate Cisco estimates and leads without manual re-entry into Salesforce or shared, insecure logins.
My role
Designed and built the serverless AWS stack end-to-end — the Terraform infrastructure, the FastAPI/Lambda backend, the Cognito auth integration, and the CloudFront/API Gateway routing.
Technology
React, Vite, FastAPI on AWS Lambda (Mangum), API Gateway, CloudFront, S3, Amazon Cognito, RDS MySQL (IAM auth), EventBridge, Terraform, Salesforce APIs.
Key challenges
Serving a SPA and a serverless API from one CloudFront domain without exposing the raw API Gateway URL, and connecting Lambda to RDS without ever storing a static database password.
Solution
Fronted both the S3-hosted SPA and API Gateway with a single CloudFront distribution, protected by a shared-secret header the Lambda validates; used IAM database authentication for RDS instead of a static password; and isolated a separate EventBridge-scheduled Lambda to handle GDPR purges outside the VPC.
Impact
One public hostname serves the whole product, the API is unreachable except through CloudFront, there's no long-lived database credential anywhere, and GDPR retention is enforced automatically every day.