@aws-amplify/graphql-api-construct 1.18.8-gen2-migration-0205.0 → 1.19.0

package/src/amplify-graphql-api.ts

@@ -1,7 +1,7 @@
 import * as path from 'path';
 import { Construct } from 'constructs';
 import { ExecuteTransformConfig, executeTransform } from '@aws-amplify/graphql-transformer';
-import { NestedStack, Stack, Annotations } from 'aws-cdk-lib';
+import { NestedStack, Stack, Annotations, FeatureFlags } from 'aws-cdk-lib';
 import { AttributionMetadataStorage, StackMetadataBackendOutputStorageStrategy } from '@aws-amplify/backend-output-storage';
 import { graphqlOutputKey } from '@aws-amplify/backend-output-schemas';
 import type { GraphqlOutput, AwsAppsyncAuthenticationType } from '@aws-amplify/backend-output-schemas';
@@ -146,6 +146,12 @@ export class AmplifyGraphqlApi extends Construct {
     super(scope, id);
     this.stack = Stack.of(scope);
 
+    // Fall back to default true if no feature flag is provided, otherwise honor the feature flag value provided
+    this.node.setContext(
+      '@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections',
+      FeatureFlags.of(this).isEnabled('@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections') ?? true,
+    );
+
     validateNoOtherAmplifyGraphqlApiInStack(this);
 
     const {

package/src/types.ts

@@ -429,7 +429,7 @@ export interface MutationFunctionSlot extends FunctionSlotBase {
    * The slot name to inject this behavior into.
    * For more information on slotting, refer to https://docs.amplify.aws/cli/graphql/custom-business-logic/#extend-amplify-generated-resolvers
    */
-  readonly slotName: 'init' | 'preAuth' | 'auth' | 'postAuth' | 'preUpdate' | 'postUpdate' | 'finish';
+  readonly slotName: 'init' | 'preAuth' | 'auth' | 'postAuth' | 'validate' | 'preUpdate' | 'postUpdate' | 'finish';
 }
 /* c8 ignore stop */