Cognito customSenderKmsKey

[stevemorland]

When applying a custom KMS key to a Cognito user pool, such as

{ autoVerify: { email: false, phone: false }, signInAliases: { username: true, email: true }, signInCaseSensitive: false, customSenderKmsKey: customSenderKey, }
I don't think the Key is being applied,looking at the Cloudformation template, there is no mention of the Key and logging out from the handler for the custom message still shows the default codeParameter supplant.

{ version: '1', region: 'eu-xxxxx', userPoolId: 'xxxxxxxxx', userName: 'xxxxx', triggerSource: 'CustomMessage_AdminCreateUser', request: { userAttributes: [Object], codeParameter: '{####}', linkParameter: '{##Click Here##}', usernameParameter: '{username}' } }
I presume that the codeParameter would display aa an encrypted string?

When trying to decrypt I get an error from @aws-crypto

"errorType": "Error", "errorMessage": "Incomplete Header",

Any advice would be helpful.

[stevemorland]

Stupidity on my part...

• Using the wrong lambda trigger as we were moving from customMessage to customEmailSender

Just needed to not stare at it for a few hours to realise

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.