Cognito Migration user lambda with 2FA email

Question

### Is it possible to have migration user lambda trigger and a 2 factor auth with email in cognito on sig-in?

I need to migrate users to a cognito user pool each time they login. Migration lambda works fine and users are migrated without a problem.

I also need to have a 2FA with email where i send a code. I've defined all 3 lambdas/challenges (define, create, verify) for a custom auth flow. Using [this guide]([https://aws.amazon.com/blogs/mobile/extending-amazon-cognito-with-email-otp-for-2fa-using-amazon-ses/]).

Is it possible to invoke the 2FA after the migration lambda? And how?

Accepted Answer

I have researched on your use-case internally and on a deep dive with regards to invoke 2FA with email after calling the lambda migration trigger is currently not possible. The only available 2FA methods at present are via TOTP or SMS.

Please accept my sincere apologies for the service limitation and any inconvenience caused due to this. As a workaround, I recommend you to develop custom workflow in their application which asks for MFA after user migration is complete and user logs in.

Cognito Migration user lambda with 2FA email

Is it possible to have migration user lambda trigger and a 2 factor auth with email in cognito on sig-in?

Relevant content