AWS Cognito & Stripe Integration
Budget: $15 – $25 USD
I need our AI-driven SaaS platform wired up so that AWS Cognito handles the entire user flow—from sign-up to profile editing—while Stripe Billing powers both subscription plans and usage-based charges. The application already runs on AWS; you’ll be adding the missing identity and payment layers and making sure they talk to each other seamlessly.
Here’s what success looks like for me:
• Cognito configured for user management and profiles with secure authentication baked in.
• A smooth hand-off to Stripe Billing where customers can pick a plan, upgrade, downgrade or be billed for usage without leaving the app.
• Webhooks and Lambda/API integrations that keep account status, entitlements and metered usage perfectly in sync.
• Clean, well-documented code and infrastructure (Terraform, CloudFormation or CDK—your choice) so future devs can extend it easily.
Show me examples of past work that prove you’ve tackled Cognito plus Stripe in a production environment, and let me know roughly how you plan to approach the metered billing logic. If your previous projects demonstrate solid security practices and an eye for developer-friendly architecture, we should be a great fit.
A. Authentication (AWS Cognito)
Configure AWS Cognito for user authentication.
Roles: Recruiter, Hiring Manager, HR Ops/Admin.
Enforce MFA and JWT claims for role/tenant IDs.
Log authentication events (sign-in/out).
B. Billing (Stripe)
Integrate Stripe Subscriptions + Usage-based billing.
Support config-driven plans (per Job Description, per Resume, or hybrid bundles).
Implement entitlement checks (soft/hard caps, overage toggle).
Build a credit wallet with rollover + expiry (FIFO burn).
Handle Stripe webhooks securely (authenticated + idempotent).
Tenant-facing UI: show base credits, rollover credits (with expiry), and remaining usage.
C. SOC2-lite Controls (AWS)
Enable CloudTrail for logging.
Enable GuardDuty for threat detection.
Use KMS encryption for data at rest.
Ensure backups are enabled (RDS/Dynamo/S3).
Add a simple audit log table for sensitive actions (analyze JD, export results, billing events).
Deliverables
Working Cognito authentication with MFA + RBAC.
Working Stripe billing integration (subscriptions + metered usage).
Credit wallet with rollover & expiry.
Basic Admin panel + Tenant usage dashboard (simple UI is fine for MVP).
AWS security baseline (CloudTrail, GuardDuty, KMS, backups).
Documentation + test cases for:
Rollover expiry (FIFO burn).
Soft vs. hard cap enforcement.
Idempotent webhook handling.
Here’s what success looks like for me:
• Cognito configured for user management and profiles with secure authentication baked in.
• A smooth hand-off to Stripe Billing where customers can pick a plan, upgrade, downgrade or be billed for usage without leaving the app.
• Webhooks and Lambda/API integrations that keep account status, entitlements and metered usage perfectly in sync.
• Clean, well-documented code and infrastructure (Terraform, CloudFormation or CDK—your choice) so future devs can extend it easily.
Show me examples of past work that prove you’ve tackled Cognito plus Stripe in a production environment, and let me know roughly how you plan to approach the metered billing logic. If your previous projects demonstrate solid security practices and an eye for developer-friendly architecture, we should be a great fit.
A. Authentication (AWS Cognito)
Configure AWS Cognito for user authentication.
Roles: Recruiter, Hiring Manager, HR Ops/Admin.
Enforce MFA and JWT claims for role/tenant IDs.
Log authentication events (sign-in/out).
B. Billing (Stripe)
Integrate Stripe Subscriptions + Usage-based billing.
Support config-driven plans (per Job Description, per Resume, or hybrid bundles).
Implement entitlement checks (soft/hard caps, overage toggle).
Build a credit wallet with rollover + expiry (FIFO burn).
Handle Stripe webhooks securely (authenticated + idempotent).
Tenant-facing UI: show base credits, rollover credits (with expiry), and remaining usage.
C. SOC2-lite Controls (AWS)
Enable CloudTrail for logging.
Enable GuardDuty for threat detection.
Use KMS encryption for data at rest.
Ensure backups are enabled (RDS/Dynamo/S3).
Add a simple audit log table for sensitive actions (analyze JD, export results, billing events).
Deliverables
Working Cognito authentication with MFA + RBAC.
Working Stripe billing integration (subscriptions + metered usage).
Credit wallet with rollover & expiry.
Basic Admin panel + Tenant usage dashboard (simple UI is fine for MVP).
AWS security baseline (CloudTrail, GuardDuty, KMS, backups).
Documentation + test cases for:
Rollover expiry (FIFO burn).
Soft vs. hard cap enforcement.
Idempotent webhook handling.