I've currently implemented a cognito user pool for my app and used it on the api-gateway to secure my functions. Its all working well, but here's my problem. I have 2 lambda functions: `CreateEmployee` and `DeleteEmployee`. How can I set that only specific users has access to the `DeleteEmployee` function?