Cognito can have custom attributes.
Whether the user has been disabled.
The email (=== username).
OptionalstatusThe status of the account: e.g. FORCE_CHANGE_PASSWORD until the first sign-in replaces the temporary password.
Not available when the user comes from the authorizer claims.
The user id (sub).
The attributes of a generic Cognito user of which we don't know the custom attributes.