AWS Cognito vs Databunker Pro — PII Vault & Tokenization

// AWS Cognito — PII stored as user attributes
const cognito = new AWS.CognitoIdentityServiceProvider();

await cognito.adminUpdateUserAttributes({
  UserPoolId: 'us-east-1_XXXXX',
  Username: 'john@example.com',
  UserAttributes: [
    { Name: 'custom:ssn', Value: '123-45-6789' },      // PII in Cognito
    { Name: 'custom:phone', Value: '+1-555-123-4567' }, // PII in Cognito
    { Name: 'address', Value: '123 Main St' }            // PII in Cognito
  ]
}).promise();
// PII is now in AWS — in their console, their backups, their logs

const axios = require('axios');

// 1. Store PII in Databunker Pro — get back a safe token
const response = await axios.post('https://your-databunker/v2/UserCreate', {
  profile: {
    email: 'john@example.com',
    first: 'John',
    last: 'Doe',
    phone: '+1-555-123-4567',
    ssn: '123-45-6789',
    address: '123 Main St'
  }
}, {
  headers: { 'X-Bunker-Token': process.env.DATABUNKER_API_KEY }
});

const userToken = response.data.token;
// "a21fa1d3-5e47-11ef-a729-32e05c6f6c16"

// 2. Store only the token in your app database — zero PII
await db.query(
  'INSERT INTO users (id, databunker_token) VALUES ($1, $2)',
  [userId, userToken]
);

// 3. Retrieve PII only when you need to display it
const user = await axios.post('https://your-databunker/v2/UserGet', {
  mode: 'token',
  identity: userToken
}, {
  headers: { 'X-Bunker-Token': process.env.DATABUNKER_API_KEY }
});

console.log(user.data.profile.email); // "john@example.com"

curl -X POST https://your-databunker/v2/TokenCreate \
  -H "X-Bunker-Token: YOUR_API_KEY" \
  -d '{
    "record": "4532015112830366",
    "type": "creditcard",
    "expiration": "30d",
    "unique": true
  }'

{
  "status": "ok",
  "tokenuuid": "550e8400-e29b-41d4-a716-446655440000",
  "tokenbase": "4024007186539112"
}