@aws-amplify/graphql-api-construct 1.2.0 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-amplify/graphql-api-construct",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "AppSync GraphQL Api Construct using Amplify GraphQL Transformer.",
   "repository": {
     "type": "git",
@@ -76,19 +76,19 @@
   "dependencies": {
     "@aws-amplify/backend-output-schemas": "^0.2.0-alpha.6",
     "@aws-amplify/backend-output-storage": "^0.1.1-alpha.2",
-    "@aws-amplify/graphql-auth-transformer": "3.1.9",
-    "@aws-amplify/graphql-default-value-transformer": "2.1.7",
-    "@aws-amplify/graphql-function-transformer": "2.1.6",
-    "@aws-amplify/graphql-http-transformer": "2.1.6",
-    "@aws-amplify/graphql-index-transformer": "2.1.7",
-    "@aws-amplify/graphql-maps-to-transformer": "3.2.4",
-    "@aws-amplify/graphql-model-transformer": "2.2.3",
-    "@aws-amplify/graphql-predictions-transformer": "2.1.6",
-    "@aws-amplify/graphql-relational-transformer": "2.1.7",
-    "@aws-amplify/graphql-searchable-transformer": "2.2.3",
-    "@aws-amplify/graphql-transformer": "1.2.5",
-    "@aws-amplify/graphql-transformer-core": "2.2.3",
-    "@aws-amplify/graphql-transformer-interfaces": "3.2.1",
+    "@aws-amplify/graphql-auth-transformer": "3.1.10",
+    "@aws-amplify/graphql-default-value-transformer": "2.1.8",
+    "@aws-amplify/graphql-function-transformer": "2.1.7",
+    "@aws-amplify/graphql-http-transformer": "2.1.7",
+    "@aws-amplify/graphql-index-transformer": "2.1.8",
+    "@aws-amplify/graphql-maps-to-transformer": "3.2.5",
+    "@aws-amplify/graphql-model-transformer": "2.2.4",
+    "@aws-amplify/graphql-predictions-transformer": "2.1.7",
+    "@aws-amplify/graphql-relational-transformer": "2.1.8",
+    "@aws-amplify/graphql-searchable-transformer": "2.2.4",
+    "@aws-amplify/graphql-transformer": "1.2.6",
+    "@aws-amplify/graphql-transformer-core": "2.2.4",
+    "@aws-amplify/graphql-transformer-interfaces": "3.2.2",
     "charenc": "^0.0.2",
     "crypt": "^0.0.2",
     "fs-extra": "^8.1.0",
@@ -162,5 +162,5 @@
       }
     }
   },
-  "gitHead": "66cf35b327c5b4c1dde6fe2e526b34a50ad87e74"
+  "gitHead": "bd0e1b983962b9e2d15544295f8312ae379ea427"
 }

package/src/internal/authorization-modes.ts

@@ -9,6 +9,7 @@ import {
   OIDCAuthorizationConfig,
   UserPoolAuthorizationConfig,
 } from '../types';
+import { ServicePrincipal } from 'aws-cdk-lib/aws-iam';
 
 type AuthorizationConfigMode =
   | (IAMAuthorizationConfig & { type: 'AWS_IAM' })
@@ -56,6 +57,7 @@ const convertAuthModeToAuthProvider = (authMode: AuthorizationConfigMode): AppSy
       return {
         authenticationType,
         lambdaAuthorizerConfig: {
+          lambdaArn: authMode.function.functionArn,
           lambdaFunction: authMode.function.functionName,
           ttlSeconds: authMode.ttl.toSeconds(),
         },
@@ -89,6 +91,12 @@ const convertAuthConfigToAppSyncAuth = (authModes: AuthorizationModes): AppSyncA
     throw new Error('A defaultAuthorizationMode is required if multiple authorization modes are configured.');
   }
 
+  // Enable appsync to invoke a provided lambda authorizer function
+  authModes.lambdaConfig?.function.addPermission('appsync-auth-invoke', {
+    principal: new ServicePrincipal('appsync.amazonaws.com'),
+    action: 'lambda:InvokeFunction',
+  });
+
   // In the case of a single mode, defaultAuthorizationMode is not required, just use the provided value.
   if (authProviders.length === 1) {
     return {