Calls
What the agent is doing
Your sign in becomes a set of temporary AWS credentials that can read the call record and write one kind of row. There is no server between this page and the database, and nothing to trust in between.