AppSync GraphQL API
Managed GraphQL with real-time subscriptions.
Configuration
Section titled “Configuration”| Setting | Type | Required | Default |
|---|---|---|---|
| API name | Text | Yes | — |
| Auth type Options: API key, IAM, Cognito User Pools, OpenID Connect, Lambda authorizer | Choice | — | API_KEY |
| Cognito user pool ID | Text | — | — |
| Cognito region | Text | — | — |
| Cognito default action Options: Allow, Deny | Choice | — | ALLOW |
| Lambda authorizer ARN | Text | — | — |
| Lambda authorizer TTL (s) | Number | — | 300 |
| X-Ray tracing Options: Enabled, Disabled | Choice | — | false |
| Log level Options: None, Error, All | Choice | — | NONE |
| Exclude verbose log content | Toggle | — | false |
| CloudWatch logging role ARN | Text | — | — |
| Introspection enabled | Toggle | — | true |
| Query depth limit | Number | — | 0 |
| Resolver count limit | Number | — | 0 |
| Schema (SDL) | Text | — | — |
| Tags | Key–value | — | — |
Connections
Section titled “Connections”| Socket | Direction | Accepts | Terraform arg |
|---|---|---|---|
| Client | Input | any | — |
| Cognito user pool | Input | aws.cognito-user-pool | user_pool_config.user_pool_id |
| Lambda authorizer | Input | aws.lambda | lambda_authorizer_config.authorizer_uri |
| CloudWatch logging role | Input | aws.iam-role | log_config.cloudwatch_logs_role_arn |
| Data source | Output | any | — |