Seems like many folks are looking for a deep dive tutorial on custom resources, so we created this tutorial, which demonstrates the topic through implementing serverless authentication, with examples.
https://www.puresec.io/blog/a-deep-dive-on-aws-cloudformation-custom-resources