Use X-Forwarded-For header for request.ip if exists

[schris403]

If the X-Forwarded-For header exists in a request, it should use that for request.ip instead of requestContext.identity.sourceIp