Today, Amazon Cognito adds two features that enable mobile and web app developers to manage users and user permissions. Amazon Cognito Your User Pools now offers groups as an easy way to manage users and their permissions. Developers can create and edit groups and group membership in a user pool through the Amazon Cognito console and APIs. Amazon Cognito also now supports fine-grained role-based access control (RBAC) in Amazon Cognito Federated Identities. Developers can use this feature to assign different IAM roles and permissions to different authenticated users. Developers can have IAM roles set by identity providers, or developers can create rules that map users to roles based on group membership or other user attributes.
Amazon Cognito is now also available in the US East (Ohio) and Asia Pacific (Sydney) regions.
To learn more, see our Groups documentation and Fine-Grained Role-Based Access Control documentation.