A collection of configuration templates for AWS AppSync as well as security controls for monitoring and protecting AWS AppSync configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
This template creates a new AWS AppSync GraphQL API `my-appsync-api`. It uses Cognito for authentication (user pool us-east-1_123456789)
This template creates an API key and associates it with a new GraphQL API. You can optionally add a parameter to set key expiry
This template creates an ApiCache for a GraphQL API. The `ApiCache` resource is of type `AWS::AppSync::ApiCache` and has properties such as `Type` which is set to `SMALL`, `ApiCachingBehavior` which is set to `FULL_REQUEST_CACHING`, `Ttl` which is set to 1200, `TransitEncryptionEnabled` which is set to true, and `AtRestEncryptionEnabled` which is set to true.
This template creates an AWS AppSync GraphQL API with API key authentication and configures a large cache with full request caching behavior.
Creates an AWS AppSync GraphQL API with an HTTP data source and a function to handle requests and responses.
Configures an AWS AppSync GraphQL API to authenticate via an Amazon Cognito User Pool.
Configures logging for an AWS AppSync GraphQL API using an IAM role to push logs to CloudWatch.
Associates a Web ACL with an AWS AppSync GraphQL API for enhanced security.
Creates an AppSync GraphQL API with a schema for posts, an HTTP data source, and resolvers for querying and mutating posts.
Creates an AWS AppSync GraphQL API and defines a Mutation type for posting data.
Checks if AWS AppSync APIs are associated with AWS WAFv2 web access control lists (ACLs). The rule is NON_COMPLIANT for an AWS AppSync API if it is not associated with a web ACL.
Checks if an AWS AppSync API cache has encryption at rest enabled. This rule is NON_COMPLIANT if 'AtRestEncryptionEnabled' is false.
Checks if an AWS AppSync API has logging enabled. The rule is NON_COMPLIANT if logging is not enabled, or 'fieldLogLevel' is neither ERROR nor ALL.