Why amazon cognito authorizer works just as authenticator not as an authorizer

Question

Why amazon cognito authorizer is not working as an authorizer even it can get the role from the authentication token and the role has assigned allow and deny policy. It just works as an authenticator not as authorizer.

Answer 1

Because it is an authenticator. Naming it as authorizer is just unfortunate by AWS.
You can also roll out your own custom authorizer