[TameAntelope]

I don't know if Cognito is an access control solution per se, since it doesn't support any kind of AuthZ (AFAICT) out of the box.