diff --git a/terraform/organization/datasources.tf b/terraform/organization/datasources.tf
index 3379531..12683c1 100644
--- a/terraform/organization/datasources.tf
+++ b/terraform/organization/datasources.tf
@@ -14,6 +14,7 @@ data "template_file" "userdata" {
   template = file("${path.module}/html/index.html")
   vars = {
     ENDPOINT = "${module.apigw.endpoint}"
+    token = ""
   }
 }
 
@@ -25,7 +26,8 @@ data "aws_iam_policy_document" "dynamodb" {
       "dynamodb:Scan",
       "dynamodb:GetItem",
       "dynamodb:UpdateItem",
-      "dynamodb:DeleteItem"
+      "dynamodb:DeleteItem",
+      "dynamodb:Query",
     ]
     principals {
       type        = "AWS"
diff --git a/terraform/organization/dynamodb.tf b/terraform/organization/dynamodb.tf
index ef75666..661e4e8 100644
--- a/terraform/organization/dynamodb.tf
+++ b/terraform/organization/dynamodb.tf
@@ -9,9 +9,14 @@ module "dynamodb" {
   billing_mode   = "PROVISIONED"
   read_capacity  = 20
   write_capacity = 20
-  hash_key       = "id"
+  hash_key       = "username"
+  range_key      = "id"
 
   attributes = [
+    {
+      name = "username"
+      type = "S"
+    },
     {
       name = "id"
       type = "N"
diff --git a/terraform/organization/html/index.html b/terraform/organization/html/index.html
index 5634c1e..a0a8410 100644
--- a/terraform/organization/html/index.html
+++ b/terraform/organization/html/index.html
@@ -5,7 +5,9 @@
 <head>
     <title>BSMSapp</title>
     <div align="center">
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js"></script>
 </head>
+
 <div class="d-flex flex-column justify-content-center w-100 h-100">
     <br><br>
     <body bgcolor="#FFFFFF" text="Black">
@@ -13,7 +15,9 @@
             <h1><span id="replace">BSMSapp</span></h1>
         </header>
 
-        <form id="myForm" class="form-style">
+        <button class="style" id="login">Login</button>
+
+        <form id="myForm" class="form-style" style="display:none">
             <ul>
                 <li>
                     <input value="0" name="id" type="number" min="0"/>
@@ -30,7 +34,7 @@
             </ul>
         </form>
 
-        <button class="style" onclick="get_table()">Get table</button>
+        <button class="style" onclick="get_table()" style="display:none" id="tableBtn">Get table</button>
         <br><br>
         <table id="table" align="center" border="1px"></table>
     </body>
@@ -39,6 +43,44 @@
 </html>
 
 <script>
+    document.getElementById("login").onclick = function () {
+        location.href = "https://santilococo.auth.us-east-1.amazoncognito.com/login?client_id=2a9hfokn5a1flh1j3hmp0c035u&response_type=code&scope=email+openid+phone&redirect_uri=https%3A%2F%2Fsantilococo.com.ar";
+    };
+
+    var token = localStorage.getItem('token') || undefined;
+    console.log(token)
+
+    if (typeof token === 'undefined' || token === null) {
+        console.log('no hay token guardado')
+        aux = get_token()
+        var promiseB = aux.then(function(result) {
+            if (result) {
+                token = result["access_token"]
+                localStorage.setItem('token', token);
+                console.log(token)
+                username = get_user(token)
+
+                var prom = username.then(function(result) {
+                    username = result["username"]
+                    localStorage.setItem('username', token);
+                    console.log(username)
+                });
+            }
+        });
+    } else {
+        $("#myForm").show();
+        $("#tableBtn").show();
+        $("#login").hide();
+
+        username = get_user(token)
+
+        var prom = username.then(function(result) {
+            username = result["username"]
+            localStorage.setItem('username', token);
+            console.log(username)
+        });
+    }
+
     const thisForm = document.getElementById('myForm');
     thisForm.addEventListener('submit', async function (e) {
         e.preventDefault();
@@ -48,7 +90,9 @@
         } else {
             api_method = "DELETE"
         }
-        const formData = new FormData(thisForm).entries()
+        formData = new FormData(thisForm)
+        formData.append("username", username)
+        formData = formData.entries()
         const str = JSON.stringify(Object.fromEntries(formData))
         const response = await fetch("${ENDPOINT}/products", {
             method: api_method,
@@ -68,7 +112,11 @@
     }
 
     async function get_table() {
-        const request = await fetch("${ENDPOINT}/products", {
+        aux = username
+        queryParam = new URLSearchParams({
+            username: aux
+        })
+        const request = await fetch("${ENDPOINT}/products?" + queryParam, {
             method: 'GET',
             headers: {
                 'Content-Type': 'application/json'
@@ -111,6 +159,48 @@
         el.appendChild(table);
     }
 
+    async function get_token() {
+        const urlParams = new URLSearchParams(window.location.search);
+        const code = urlParams.get('code');
+
+        if (!code) {
+            return undefined
+        }
+
+        $("#myForm").show();
+        $("#tableBtn").show();
+        $("#login").hide();
+
+        const response = await fetch('https://santilococo.auth.us-east-1.amazoncognito.com/oauth2/token', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded'
+            },    
+            body: new URLSearchParams({
+                'grant_type': 'authorization_code',
+                'code': code,
+                'client_id': '2a9hfokn5a1flh1j3hmp0c035u',
+                'redirect_uri': 'https://santilococo.com.ar'
+            })
+        });
+
+        return await response.json()
+    }
+
+    async function get_user(token) {
+        str = 'Bearer ' + token
+        const response = await fetch('https://santilococo.auth.us-east-1.amazoncognito.com/oauth2/userInfo', {
+            method: 'GET',
+            headers: {
+                "Authorization" : str
+            }
+        });
+
+        return await response.json()
+    }
+
+
+
 </script>
 
 <style type="text/css">
diff --git a/terraform/resources/lambda/lambdaDB.zip b/terraform/resources/lambda/lambdaDB.zip
index c25b027..72a7726 100644
Binary files a/terraform/resources/lambda/lambdaDB.zip and b/terraform/resources/lambda/lambdaDB.zip differ
diff --git a/terraform/resources/lambda/lambdaDB/lambda_handler.py b/terraform/resources/lambda/lambdaDB/lambda_handler.py
index cf37542..c427187 100644
--- a/terraform/resources/lambda/lambdaDB/lambda_handler.py
+++ b/terraform/resources/lambda/lambdaDB/lambda_handler.py
@@ -1,5 +1,6 @@
 import json
 import boto3
+from boto3.dynamodb.conditions import Key
 from decimal import *
 
 
@@ -14,7 +15,16 @@ def main(event, context):
     client = boto3.resource('dynamodb', region_name="us-east-1")
     table = client.Table("AWSDynamoDB-g3")
 
-    data = table.scan()["Items"]
+    payload = event
+    body = payload["queryStringParameters"]
+    query = body
+
+    key = "username"
+    value = query["username"]
+
+
+    filtering_exp = Key(key).eq(value)
+    data = table.query(KeyConditionExpression=filtering_exp, ProjectionExpression='id, stock')["Items"]
 
     resp = {
         "statusCode": 200,
diff --git a/terraform/resources/lambda/lambdaError.zip b/terraform/resources/lambda/lambdaError.zip
index 9f9aa39..013b424 100644
Binary files a/terraform/resources/lambda/lambdaError.zip and b/terraform/resources/lambda/lambdaError.zip differ
diff --git a/terraform/resources/lambda/lambdaGET.zip b/terraform/resources/lambda/lambdaGET.zip
index 6fd201b..3d17de3 100644
Binary files a/terraform/resources/lambda/lambdaGET.zip and b/terraform/resources/lambda/lambdaGET.zip differ
diff --git a/terraform/resources/lambda/lambdaRemove.zip b/terraform/resources/lambda/lambdaRemove.zip
index 55598a1..77b0caa 100644
Binary files a/terraform/resources/lambda/lambdaRemove.zip and b/terraform/resources/lambda/lambdaRemove.zip differ
diff --git a/terraform/resources/lambda/lambdaRemove/lambda_handler.py b/terraform/resources/lambda/lambdaRemove/lambda_handler.py
index e240072..dd02618 100644
--- a/terraform/resources/lambda/lambdaRemove/lambda_handler.py
+++ b/terraform/resources/lambda/lambdaRemove/lambda_handler.py
@@ -12,7 +12,8 @@ def main(event, context):
     table = client.Table("AWSDynamoDB-g3")
 
     table.delete_item(Key={
-        'id': query["id"]
+        'id': query["id"],
+        'username': query["username"]
     })
 
     resp = {
diff --git a/terraform/resources/lambda/lambdaSNS.zip b/terraform/resources/lambda/lambdaSNS.zip
index d4132c1..8f6b26d 100644
Binary files a/terraform/resources/lambda/lambdaSNS.zip and b/terraform/resources/lambda/lambdaSNS.zip differ
diff --git a/terraform/resources/lambda/lambdaSQS.zip b/terraform/resources/lambda/lambdaSQS.zip
index 6e3c2cb..96a72ae 100644
Binary files a/terraform/resources/lambda/lambdaSQS.zip and b/terraform/resources/lambda/lambdaSQS.zip differ
diff --git a/terraform/resources/lambda/lambdaUpdate.zip b/terraform/resources/lambda/lambdaUpdate.zip
index 6cc5c8b..3ae8dc8 100644
Binary files a/terraform/resources/lambda/lambdaUpdate.zip and b/terraform/resources/lambda/lambdaUpdate.zip differ
diff --git a/terraform/resources/lambda/lambdaUpdateAPI.zip b/terraform/resources/lambda/lambdaUpdateAPI.zip
index d14c095..9f1d4e4 100644
Binary files a/terraform/resources/lambda/lambdaUpdateAPI.zip and b/terraform/resources/lambda/lambdaUpdateAPI.zip differ
