For some reason the message that is being used to check the signature is NaN, so the next step to debug would be to check the headers and body you’re receiving with console.log(event.headers, event.body); which can be placed as the first thing in the verifySignature function. That way in Cloudwatch you should also see the headers being sent.