cognito:groups — Cognito Groups

Location: payload · Format: array-or-string · Vendor: AWS Cognito

An array of Cognito User Pool group names the user belongs to, present on both ID and access tokens. Group membership here reflects Cognito's own group feature and is separate from any IAM roles that may additionally be attached to a group.

Defined in Amazon Cognito user pool tokens.

Decode a JWT and inspect its cognito:groups claim in the TokenPrism debugger — free, entirely in your browser.