I am creating a basic web app with react that uses a google login button and AWS Cognito to authorize tokens that will give users access to certain AWS resources. Here is my thought process:
- User signs in with Google Login (User is Authenticated)
- Google token is sent to Identity Pool
- The user is recognized in Identity pool (User is Authorized)
- The user gains access to AWS resources like S3 based on IAM role
I have several questions that correspond to this:
- I need to create a custom UI and the hosted user pool with google login is not an option. Without using the hosted UI, how do see all of my users logged into the app?
- How do I set up different IAM based on different users? For instance, Sally has read and write permissions to S3, but Bob only has read permissions, how do I only assign IAM roles to specific users? Do I need to write lambda functions or can rule within the identity pool to accomplish this task?
Any information on this topic would be much appreciated.