Lambda Cognito User Pool authorizer - can I automatically get the custom user attributes?

Question

I'm using Lambda functions, executed via API Gateway using a Cognito User Pool Authorizer.

I know I can get the "standard" user attributes (like sub, email, cognito:username, etc.) from event.requestContext.authorizer.claims.

But this does not include custom user attributes (like custom:myAttribute).

I know I can get them via adminGetUser, and this works, but I wonder whether I can save this call and somehow get those custom attributes automatically in the event?

Answer 1

Have you already looked at this doc for custom claims? https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-enable-cognito-user-pool.html. You will need to define context in following manner for custom attributes:

{
    "context" : {
        "role" : "$context.authorizer.claims['custom:myAttribute']"
    }
}