Cognito custom flow sign-in sends a confirm code via email

Flow basic

Prepare:

Cognito create user pool

Create 3 lambda function: 2faDefine.js, 2faCreate.js, 2faVerify.js

Cognito user pool

Note: User pool ID & App client ID

1./ Tab User: create user

The newly created user has confirmation status is Force change password, now you need to run the script below to update confirmation status from Force change password to Confirmed.

aws cognito-idp admin-set-user-password --user-pool-id {user pool ID} --username {username} --password {password} --permanent 

2./ Tab Sign-up experience

Add custom attributes authChallenge, so …

amp app aws basic change change password client code cognito confirm email flow function javascript lambda password prepare run script sign tab