According to AWS documentation, "create/verify auth challenge" Cognito user pool events should have userNotFound field, and they did as far as I tested on my AWS account. However, user_not_found fields are missing in:
They should have user_not_found field similar to CognitoEventUserPoolsDefineAuthChallengeRequest.
userNotFound information helps us when we have to generate dummy challenges for non-existing users so that users' presence is not disclosed.