Small surface.
Clear purpose.

Mailroute stores the alias, its label and state, your Cognito subject, and the verified destination needed to forward mail.

Message handling

Incoming messages are stored privately while the asynchronous relay processes them. Transport authentication headers are removed before SES signs the forwarded message; MIME content and attachments remain intact.

Your controls

Disabling an alias stops forwarding. Deleting it permanently removes the route. This proof of concept does not sell personal data or expose browser credentials to AWS.