Can Amplify’s Storage resource apply permissions beyond the basic levels of private, protected, and public?
Protected and public are too permissive for our needs, but private is too tight.
Is there any way to tie access to certain Cognito attributes, just as we can do with the GraphQL models?
For example, could one designate a set of files that can be readable by anyone with a custom:companyID attribute of "12345"? Or mandate that all files are readable/writable by anyone in the "Admins" usergroup?