How to get the ID token in trigger functions of AWS Cognito?

In the lambda trigger functions of AWS Cognito, say Post confirmation trigger or Post authentication trigger, I would like to get the ID token, such that I could query some other services on behalf of the user.

Is that possible and if so, how?

It would be terrific if you could also provide a small example in Javascript and/or Python.