What you’ll build (final output)




Public API (GET /health) to verify the stack.

Protected API (/profiles/*, /orders/*) fronted by API Gateway + Cognito:




POST /profiles – create/update a user profile (DynamoDB)

GET /profiles/{id} – fetch profile (DynamoDB)

POST /orders – place an order...