I am confused how I am meant to control access in a API Gateway Rest API using Amazon Cognito User Pools

Question

I have spent 2 days trying to understand the idea behind Amazon Cognito Access Control for a site I am trying to create. Its very simple:

• The site allows users