https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-user-groups.html https://aws.amazon.com/blogs/aws/new-amazon-cognito-groups-and-fine-grained-role-based-access-control-2/