是否可以使用 Amazon Cognito 组来设置对 AW 资源（例如 Amazon DynamoDB 和 Amazon S3）的权限？

Question

In my application I want to users to be able to create an organization ie (OrgA) and then have users sign up under said organization using either an invite code or token. Users in OrgA should have access to an Amazon S3 directory (which stores images and files) and access to a database table that has been created for the said organization.

I could not find a solution on how to implement this online and was wondering if using Amazon Cognito groups was a good idea to meet requirements.

Answer 1

This is supported by the Amazon Cognito Service. That is, you can use Amazon Cognito to control permissions for different user groups in your app. This ensures that users have appropriate access to backend resources, determined by the group they belong to. For more information, see Building fine-grained authorization using Amazon Cognito User Pools groups .