** Which Category is your question related to? **
Storage, Auth
** What AWS Services are you utilizing? **
Amplify, Appsync, S3, Cognito
** Provide additional details e.g. code snippets **
I have Auth set up in my React Amplify app so that Cognito users in an "Admin" Cognito Group have full access, while all other users have limited access.

I need a way to allow all users to upload documents to S3 storage, and provide access controls based on Cognito Groups, particularly one "Admin" Cognito group having access to all files. Right now only the Logged In user that uploaded a file can successfully Storage.get() it from Storage.

I've been playing around with Bucket policies and IAM roles, but haven't been able to figure it out. I am sure there is a simple solution! Any help would be appreciated.