Cognito Authorizer and User Groups

Hi,

I need to control access to my api with user groups : in the same user pool, users belong to different groups and have access to different parts (pages) of the same app. I also have the case where some users have access to 2 apps but others only one.

Cognito Authorizer only check if user belongs to cognito user pool. It would be great if I could precise user groups (or attributed roles). CustomAuthorizer may be a solution but It requires to rewrite jwt checks.

Thanks !

The issue names no file, test, or entry point. Start by reviewing Chalice's Cognito Authorizer and CustomAuthorizer integration and documentation, then establish how group or role restrictions should be represented and tested; done means the supported access behavior is specified and covered by tests.

Written by the indexing model from the issue text.