Enable Cognito-authenticated users to access S3 bucket

I would like to enable Cognito-authenticated users to upload data to a common S3 bucket via multipart uploading; non-authenticated users should not be able to upload data. However, I'm not sure how to enable this because there don't seem to be docs related to this problem. Is there a way to do this?