Implementing a custom sender lambda trigger that can decrypt the Cognito temporary passcodes using a shared KMS key to send them out using your own mail or sms provider or implementation.
Tag: KMS
How to create an AWS KMS Cryptographic Key from both the Console and with a Cloudformation Template
Demonstrating how to create an AWS customer managed KMS – Key Management Service – Key for encryption/decryption needs from both the console and by defining one in a cloudformation template.