title: AWS Amplify - Cognito User Group members lose permissions granted by the default authRole
body: <p>I have created a couple of Cognito User Groups named &quot;admins&quot; and &quot;editors&quot; which has in turn created IAM roles as expected <code>{USERPOOLID}-adminsGroupRole</code>. These IAM roles have no policies attached and when a user becomes a member of this group it appears that any permissions they were granted via the default authRole as a non-group user are completely ignored.</p>
  <p>I would expected the authRole to be applied to anyone who is authenticated and my admins/editors group to provide additional permissions. If this is the way it works I am then expected to generate custom policies in my CloudFormation templates which already exist elsewhere, and they'd need to be dynamic to work for multiple environments/buckets etc. which is a ballache.</p>
  <p>Am I approaching this wrong or misunderstanding? This behavior seems very odd.</p>
  <p>Thanks</p>