AWS Cognito是一种用于管理用户身份验证和授权的服务。它允许您创建用户池来管理用户身份，并使用组织间群组来组织和控制用户访问权限。

组织间群组是一种将用户池中的用户组织为具有共享访问权限的组的方法。您可以使用组织间群组来创建具有不同访问权限的用户角色，并将用户分配到这些角色中。

下面是一个使用AWS SDK for JavaScript（例如Node.js）创建组织间群组的示例代码：

const AWS = require('aws-sdk');
const cognitoIdentityServiceProvider = new AWS.CognitoIdentityServiceProvider();

const createGroup = async (userPoolId, groupName) => {
  const params = {
    UserPoolId: userPoolId,
    GroupName: groupName
  };

  try {
    const response = await cognitoIdentityServiceProvider.createGroup(params).promise();
    console.log(`Group ${groupName} created successfully.`);
    console.log(response);
  } catch (error) {
    console.error(`Error creating group ${groupName}: ${error}`);
  }
};

const addUserToGroup = async (userPoolId, username, groupName) => {
  const params = {
    UserPoolId: userPoolId,
    Username: username,
    GroupName: groupName
  };

  try {
    const response = await cognitoIdentityServiceProvider.adminAddUserToGroup(params).promise();
    console.log(`User ${username} added to group ${groupName} successfully.`);
    console.log(response);
  } catch (error) {
    console.error(`Error adding user ${username} to group ${groupName}: ${error}`);
  }
};

const removeUserFromGroup = async (userPoolId, username, groupName) => {
  const params = {
    UserPoolId: userPoolId,
    Username: username,
    GroupName: groupName
  };

  try {
    const response = await cognitoIdentityServiceProvider.adminRemoveUserFromGroup(params).promise();
    console.log(`User ${username} removed from group ${groupName} successfully.`);
    console.log(response);
  } catch (error) {
    console.error(`Error removing user ${username} from group ${groupName}: ${error}`);
  }
};

// 示例用法
const userPoolId = 'your-user-pool-id';
const groupName = 'your-group-name';
const username = 'your-username';

createGroup(userPoolId, groupName);
addUserToGroup(userPoolId, username, groupName);
removeUserFromGroup(userPoolId, username, groupName);

以上代码示例演示了如何使用AWS SDK for JavaScript创建组织间群组、将用户添加到组织间群组和从组织间群组中删除用户。请确保在使用代码之前将your-user-pool-id、your-group-name和your-username替换为实际的值。

请注意，您需要使用适当的AWS凭据配置AWS SDK，以便能够成功调用AWS Cognito服务。