How to get cognito id in a lambda function ?

How can I get the the cognito id of the user initiating the action in a Lambda function ?

the lambda function is triggered on s3 upload by a cognito authenticated user.

if I look in : event.Records[0].userIdentity.principalId, all i get is a string saying "CognitoIdentityCredentials"