Is it possible to use

Auth

construct for Cognito User Pool Groups?

you cant define the groups in the auth construct but you can use the userpool it creates in the CfnUserPoolGroup construct https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-cognito.CfnUserPoolGroup.html