Allow admin users to upload Public files

With Groups support in Cognito, we can easily customize our application experience by creating groups that represent different user types and app usage permissions.

Developers have the ability to add users and remove users from groups and manage group permissions for sets of users.

For example, in our current case, we want only admin users to have the capabilities to Upload Files to /public-files folder in the S3 bucket. We can create an admins group and assign a role that allows the PutObject permission in the /public-files folder.

admins groups with a role