I’m assuming you are using the

Auth

construct and using the

AWS_IAM

authorizer for your

Api

.

So

d3da6fb4-xxxx

is the user’s id in User Pool. But to access the

Api

, the user needs a temporary IAM credential issued from Identity Pool. The

us-east-2:260bc81c-xxxx

is the user’s id in Identity Pool.

As you in the screenshot, the identity pool user id is passed in as

identityId

. And to get the user pool user id, you’d have to parse it from the

amr

Let me know if that makes sense.