role based access control

[justend29]

In the app, there are different types of users: organization admins, security officers, and maybe managers. Each of these roles requires different permissions to AWS (on top of the visibility differences they will have in the app).

AWS roles can be created for each logical user role. Cognito provides groups in which registered users can be assigned and their assumable AWS roles changed accordingly.

This needs! to be implemented in order to separate privileges for each role