Accessing user claims in lambda with AWS_IAM authorizer. about aws-serverless-auth-reference-app

[honkskillet]

@Leon-Africa I think you misunderstand. The $context object seems to only have the needed info (usernam, email, etc) if you use the AppSync Auth type Cognito User Pools. If you use AWS_IAM for the Auth type, the identity field gives you very different data (such as you own AWS account ID, not useful).

[Leon-Africa]

Rather use Lambda as a proxy and then use json dot notation to access the information from the event object in Lambda.

Alternatively to that you can select the method pass through body mapping template that generates the vtl for you. make sure to pass $input for body.

In both cases you can find the information in the event object of Lambda.

you can log this to cloudwatch logs and have a look at the object there.

[honkskillet]

@outmarch Did you resolve this? I am having the same issue.

[mblarsen]

@outmarch @honkskillet did you find any way to access the claims when using AWS_IAM?

[sivaramit14]

@outmarch did you resolve this? or is there any workaround?