This template creates a new AWS AppSync GraphQL API `my-appsync-api`. It uses Cognito for authentication (user pool us-east-1_123456789)
CloudFormation
AI CloudAdvisor (Beta)
Configuration Stack0
My Presets
Security Controls
AWS Services
VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
DynamoDB Security Controls
ECR Security Controls
EMR Security
Lambda Security
CloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Alexa Skill
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrail
AWS Config
AWS CloudWatch
AWS Cognito
Amazon ConnectGuided Walkthroughs
Configuration Packages
Reference Guides
Other
AWS AppSync
A collection of configuration templates for AWS AppSync as well as security controls for monitoring and protecting AWS AppSync configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
AppSync
This template creates an API key and associates it with a new GraphQL API. You can optionally add a parameter to set key expiry
CloudFormation
This template creates an ApiCache for a GraphQL API. The `ApiCache` resource is of type `AWS::AppSync::ApiCache` and has properties such as `Type` which is set to `SMALL`, `ApiCachingBehavior` which is set to `FULL_REQUEST_CACHING`, `Ttl` which is set to 1200, `TransitEncryptionEnabled` which is set to true, and `AtRestEncryptionEnabled` which is set to true.
CloudFormation
Config Rule
Checks if AWS AppSync APIs are associated with AWS WAFv2 web access control lists (ACLs). The rule is NON_COMPLIANT for an AWS AppSync API if it is not associated with a web ACL.
CloudFormation
Checks if an AWS AppSync API cache has encryption at rest enabled. This rule is NON_COMPLIANT if 'AtRestEncryptionEnabled' is false.
CloudFormation
Checks if an AWS AppSync API has logging enabled. The rule is NON_COMPLIANT if logging is not enabled, or 'fieldLogLevel' is neither ERROR nor ALL.
CloudFormation
AppSync
Config Rule