I need an AWS S3 and Cognito policy expert

Job ID: 33884590

Budget: $250 – $750 USD

I have a home computer that uploads files to my S3 bucket hourly. That all works fine. I want to set up AWS Cognito to allow my web users (customers) the ability to sign up and access my static S3 website. The customer should be able to GET any file from the root "directory" and assets ("public") folders such as "/css", "/js", and "/data" folders, but limit the web user visibility to subfolders of the "user" (/user/999999/*) folder.
Pretty straight forward request from my perspective, but I have spent way too many hours trying to get this to work.
DETAIL:
Only username (see below) and phone number to be required in Cognito.
Usernames will be the customer's employee number (i.e. 999999).
I want to be able to de-construct the username from the JWT in my webpages (which I believe I can do on my own using javascript - I'll to that).
Cognito to request username (employee number), phone number (verified), and name (if given - not needed).
Related categories: JavaScript Linux Amazon Web Services Ruby