.Net Core microservice and inspecting Cognito JWT claims for use in authorization-CodePudding

I am developing a .net service that I am passing a Cognito generated JWT in the client that has a group claim that I hope to use to restrict API access as the JWT is passed in as a Bearer token with each API call from the front-end. e.g.

"cognito:groups":["Guest"]

In my code now I have added:

    services.AddAuthentication(DefaultScheme = JwtBearerDefaults.AuthenticationScheme)
  .AddJwtBearer(options =>
        {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateAudience = false,
            RoleClaimType = "cognito:groups"
        };
    });

I have setup up my roles and my permissions using the