They say we can use Amazon Cognito[0]. I hope they put some examples with ACL and Role management (I wonder if this could live in lambda functions using packages like node_acl)

[0] http://aws.amazon.com/cognito/