@aws-amplify/graphql-api-construct 1.3.0 → 1.4.0-nov-14-cut.0

package/README.md

@@ -1,6 +1,6 @@
 # Amplify Graphql API Construct
 
-[![View on Construct Hub](https://constructs.dev/badge?package=%40aws-amplify%2Fgraphql-construct-alpha)](https://constructs.dev/packages/@aws-amplify/graphql-api-construct)
+[![View on Construct Hub](https://constructs.dev/badge?package=%40aws-amplify%2Fgraphql-api-construct)](https://constructs.dev/packages/@aws-amplify/graphql-api-construct)
 
 This package vends an L3 CDK Construct wrapping the behavior of the Amplify GraphQL Transformer. This enables quick development and interation of AppSync APIs which support the Amplify GraphQL Directives. For more information on schema modeling in GraphQL, please refer to the [amplify developer docs](https://docs.amplify.aws/cli/graphql/overview/).
 
@@ -81,9 +81,9 @@ new AmplifyGraphqlApi(stack, 'BlogApp', {
 });
 ```
 
-### Import GraphQL Schema from files, instead of inline.
+### Import GraphQL Schema from files, instead of inline
 
-In this example, we import the schema definition itself from one or more local file, rather than an inline graphql string.
+In this example, we import the schema definition itself from one or more local files, rather than an inline graphql string.
 
 ```graphql
 # todo.graphql
@@ -132,6 +132,8 @@ new AmplifyGraphqlApi(stack, 'MultiFileDefinition', {
 });
 ```
 
+> **NOTE** The 'dataSourceStrategies' configuration option is in preview and is not recommended to use with production systems.
+
 # API Reference <a name="API Reference" id="api-reference"></a>
 
 ## Constructs <a name="Constructs" id="Constructs"></a>
@@ -812,6 +814,47 @@ The functions runtime.
 
 ---
 
+### AmplifyDynamoDbModelDataSourceStrategy <a name="AmplifyDynamoDbModelDataSourceStrategy" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy"></a>
+
+Use custom resource type 'Custom::AmplifyDynamoDBTable' to provision table.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy.Initializer"></a>
+
+```typescript
+import { AmplifyDynamoDbModelDataSourceStrategy } from '@aws-amplify/graphql-api-construct'
+
+const amplifyDynamoDbModelDataSourceStrategy: AmplifyDynamoDbModelDataSourceStrategy = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy.property.dbType">dbType</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy.property.provisionStrategy">provisionStrategy</a></code> | <code>string</code> | *No description.* |
+
+---
+
+##### `dbType`<sup>Required</sup> <a name="dbType" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy.property.dbType"></a>
+
+```typescript
+public readonly dbType: string;
+```
+
+- *Type:* string
+
+---
+
+##### `provisionStrategy`<sup>Required</sup> <a name="provisionStrategy" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy.property.provisionStrategy"></a>
+
+```typescript
+public readonly provisionStrategy: string;
+```
+
+- *Type:* string
+
+---
+
 ### AmplifyGraphqlApiCfnResources <a name="AmplifyGraphqlApiCfnResources" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlApiCfnResources"></a>
 
 L1 CDK resources from the Api which were generated as part of the transform.
@@ -1168,6 +1211,7 @@ const amplifyGraphqlApiResources: AmplifyGraphqlApiResources = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.amplifyDynamoDbTables">amplifyDynamoDbTables</a></code> | <code>{[ key: string ]: <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper">AmplifyDynamoDbTableWrapper</a>}</code> | The Generated Amplify DynamoDb Table wrapped if produced, keyed by name. |
 | <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.cfnResources">cfnResources</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlApiCfnResources">AmplifyGraphqlApiCfnResources</a></code> | L1 Cfn Resources, for when dipping down a level of abstraction is desirable. |
 | <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.functions">functions</a></code> | <code>{[ key: string ]: aws-cdk-lib.aws_lambda.IFunction}</code> | The Generated Lambda Function L1 Resources, keyed by function name. |
 | <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.graphqlApi">graphqlApi</a></code> | <code>aws-cdk-lib.aws_appsync.IGraphqlApi</code> | The Generated AppSync Api L2 Resource, includes the Schema. |
@@ -1177,6 +1221,18 @@ const amplifyGraphqlApiResources: AmplifyGraphqlApiResources = { ... }
 
 ---
 
+##### `amplifyDynamoDbTables`<sup>Required</sup> <a name="amplifyDynamoDbTables" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.amplifyDynamoDbTables"></a>
+
+```typescript
+public readonly amplifyDynamoDbTables: {[ key: string ]: AmplifyDynamoDbTableWrapper};
+```
+
+- *Type:* {[ key: string ]: <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper">AmplifyDynamoDbTableWrapper</a>}
+
+The Generated Amplify DynamoDb Table wrapped if produced, keyed by name.
+
+---
+
 ##### `cfnResources`<sup>Required</sup> <a name="cfnResources" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlApiResources.property.cfnResources"></a>
 
 ```typescript
@@ -1605,6 +1661,47 @@ For more information, refer to https://docs.aws.amazon.com/appsync/latest/devgui
 
 ---
 
+### DefaultDynamoDbModelDataSourceStrategy <a name="DefaultDynamoDbModelDataSourceStrategy" id="@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy"></a>
+
+Use default CloudFormation type 'AWS::DynamoDB::Table' to provision table.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy.Initializer"></a>
+
+```typescript
+import { DefaultDynamoDbModelDataSourceStrategy } from '@aws-amplify/graphql-api-construct'
+
+const defaultDynamoDbModelDataSourceStrategy: DefaultDynamoDbModelDataSourceStrategy = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy.property.dbType">dbType</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy.property.provisionStrategy">provisionStrategy</a></code> | <code>string</code> | *No description.* |
+
+---
+
+##### `dbType`<sup>Required</sup> <a name="dbType" id="@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy.property.dbType"></a>
+
+```typescript
+public readonly dbType: string;
+```
+
+- *Type:* string
+
+---
+
+##### `provisionStrategy`<sup>Required</sup> <a name="provisionStrategy" id="@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy.property.provisionStrategy"></a>
+
+```typescript
+public readonly provisionStrategy: string;
+```
+
+- *Type:* string
+
+---
+
 ### FunctionSlotBase <a name="FunctionSlotBase" id="@aws-amplify/graphql-api-construct.FunctionSlotBase"></a>
 
 Common slot parameters.
@@ -2079,6 +2176,7 @@ const partialTranslationBehavior: PartialTranslationBehavior = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.allowDestructiveGraphqlSchemaUpdates">allowDestructiveGraphqlSchemaUpdates</a></code> | <code>boolean</code> | The following schema updates require replacement of the underlying DynamoDB table:. |
 | <code><a href="#@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.disableResolverDeduping">disableResolverDeduping</a></code> | <code>boolean</code> | Disable resolver deduping, this can sometimes cause problems because dedupe ordering isn't stable today, which can lead to circular dependencies across stacks if models are reordered. |
 | <code><a href="#@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.enableAutoIndexQueryNames">enableAutoIndexQueryNames</a></code> | <code>boolean</code> | Automate generation of query names, and as a result attaching all indexes as queries to the generated Api. |
 | <code><a href="#@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.enableSearchNodeToNodeEncryption">enableSearchNodeToNodeEncryption</a></code> | <code>boolean</code> | If enabled, set nodeToNodeEncryption on the searchable domain (if one exists). |
@@ -2093,6 +2191,26 @@ const partialTranslationBehavior: PartialTranslationBehavior = { ... }
 
 ---
 
+##### `allowDestructiveGraphqlSchemaUpdates`<sup>Optional</sup> <a name="allowDestructiveGraphqlSchemaUpdates" id="@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.allowDestructiveGraphqlSchemaUpdates"></a>
+
+```typescript
+public readonly allowDestructiveGraphqlSchemaUpdates: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+The following schema updates require replacement of the underlying DynamoDB table:.
+
+Removing or renaming a model
+ - Modifying the primary key of a model
+ - Modifying a Local Secondary Index of a model (only applies to projects with secondaryKeyAsGSI turned off)
+
+ALL DATA WILL BE LOST when the table replacement happens. When enabled, destructive updates are allowed.
+This will only affect DynamoDB tables with provision strategy "AMPLIFY_TABLE".
+
+---
+
 ##### `disableResolverDeduping`<sup>Optional</sup> <a name="disableResolverDeduping" id="@aws-amplify/graphql-api-construct.PartialTranslationBehavior.property.disableResolverDeduping"></a>
 
 ```typescript
@@ -2245,6 +2363,51 @@ Ensure that oidc and userPool auth use the `sub` field in the for the username f
 
 ---
 
+### ProvisionedThroughput <a name="ProvisionedThroughput" id="@aws-amplify/graphql-api-construct.ProvisionedThroughput"></a>
+
+Wrapper for provisioned throughput config in DDB.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.ProvisionedThroughput.Initializer"></a>
+
+```typescript
+import { ProvisionedThroughput } from '@aws-amplify/graphql-api-construct'
+
+const provisionedThroughput: ProvisionedThroughput = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.ProvisionedThroughput.property.readCapacityUnits">readCapacityUnits</a></code> | <code>number</code> | The read capacity units on the table or index. |
+| <code><a href="#@aws-amplify/graphql-api-construct.ProvisionedThroughput.property.writeCapacityUnits">writeCapacityUnits</a></code> | <code>number</code> | The write capacity units on the table or index. |
+
+---
+
+##### `readCapacityUnits`<sup>Required</sup> <a name="readCapacityUnits" id="@aws-amplify/graphql-api-construct.ProvisionedThroughput.property.readCapacityUnits"></a>
+
+```typescript
+public readonly readCapacityUnits: number;
+```
+
+- *Type:* number
+
+The read capacity units on the table or index.
+
+---
+
+##### `writeCapacityUnits`<sup>Required</sup> <a name="writeCapacityUnits" id="@aws-amplify/graphql-api-construct.ProvisionedThroughput.property.writeCapacityUnits"></a>
+
+```typescript
+public readonly writeCapacityUnits: number;
+```
+
+- *Type:* number
+
+The write capacity units on the table or index.
+
+---
+
 ### QueryFunctionSlot <a name="QueryFunctionSlot" id="@aws-amplify/graphql-api-construct.QueryFunctionSlot"></a>
 
 Slot types for Query Resolvers.
@@ -2333,271 +2496,676 @@ This slot type applies to the Query type on the Api definition.
 
 ---
 
-### SubscriptionFunctionSlot <a name="SubscriptionFunctionSlot" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot"></a>
+### SQLLambdaModelDataSourceStrategy <a name="SQLLambdaModelDataSourceStrategy" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy"></a>
 
-Slot types for Subscription Resolvers.
+A strategy that creates a Lambda to connect to a pre-existing SQL table to resolve model data.
 
-#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.Initializer"></a>
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.Initializer"></a>
 
 ```typescript
-import { SubscriptionFunctionSlot } from '@aws-amplify/graphql-api-construct'
+import { SQLLambdaModelDataSourceStrategy } from '@aws-amplify/graphql-api-construct'
 
-const subscriptionFunctionSlot: SubscriptionFunctionSlot = { ... }
+const sQLLambdaModelDataSourceStrategy: SQLLambdaModelDataSourceStrategy = { ... }
 ```
 
 #### Properties <a name="Properties" id="Properties"></a>
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.fieldName">fieldName</a></code> | <code>string</code> | The field to attach this function to on the Api definition. |
-| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.function">function</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.FunctionSlotOverride">FunctionSlotOverride</a></code> | The overridden behavior for this slot. |
-| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotIndex">slotIndex</a></code> | <code>number</code> | The slot index to use to inject this into the execution pipeline. |
-| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotName">slotName</a></code> | <code>string</code> | The slot name to inject this behavior into. |
-| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.typeName">typeName</a></code> | <code>string</code> | This slot type applies to the Subscription type on the Api definition. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.dbConnectionConfig">dbConnectionConfig</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig">SqlModelDataSourceDbConnectionConfig</a></code> | The parameters the Lambda data source will use to connect to the database. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.dbType">dbType</a></code> | <code>string</code> | The type of the SQL database used to process model operations for this definition. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.name">name</a></code> | <code>string</code> | The name of the strategy. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.customSqlStatements">customSqlStatements</a></code> | <code>{[ key: string ]: string}</code> | Custom SQL statements. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.sqlLambdaLayerMapping">sqlLambdaLayerMapping</a></code> | <code>{[ key: string ]: string}</code> | An optional override for the default SQL Lambda Layer. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.vpcConfiguration">vpcConfiguration</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.VpcConfig">VpcConfig</a></code> | The configuration of the VPC into which to install the Lambda. |
 
 ---
 
-##### `fieldName`<sup>Required</sup> <a name="fieldName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.fieldName"></a>
+##### `dbConnectionConfig`<sup>Required</sup> <a name="dbConnectionConfig" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.dbConnectionConfig"></a>
 
 ```typescript
-public readonly fieldName: string;
+public readonly dbConnectionConfig: SqlModelDataSourceDbConnectionConfig;
 ```
 
-- *Type:* string
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig">SqlModelDataSourceDbConnectionConfig</a>
 
-The field to attach this function to on the Api definition.
+The parameters the Lambda data source will use to connect to the database.
 
 ---
 
-##### `function`<sup>Required</sup> <a name="function" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.function"></a>
+##### `dbType`<sup>Required</sup> <a name="dbType" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.dbType"></a>
 
 ```typescript
-public readonly function: FunctionSlotOverride;
+public readonly dbType: string;
 ```
 
-- *Type:* <a href="#@aws-amplify/graphql-api-construct.FunctionSlotOverride">FunctionSlotOverride</a>
+- *Type:* string
 
-The overridden behavior for this slot.
+The type of the SQL database used to process model operations for this definition.
 
 ---
 
-##### `slotIndex`<sup>Required</sup> <a name="slotIndex" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotIndex"></a>
+##### `name`<sup>Required</sup> <a name="name" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.name"></a>
 
 ```typescript
-public readonly slotIndex: number;
+public readonly name: string;
 ```
 
-- *Type:* number
+- *Type:* string
 
-The slot index to use to inject this into the execution pipeline.
+The name of the strategy.
 
-For more information on slotting, refer to https://docs.amplify.aws/cli/graphql/custom-business-logic/#extend-amplify-generated-resolvers
+This will be used to name the AppSync DataSource itself, plus any associated resources like resolver Lambdas.
+This name must be unique across all schema definitions in a GraphQL API.
 
 ---
 
-##### `slotName`<sup>Required</sup> <a name="slotName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotName"></a>
+##### `customSqlStatements`<sup>Optional</sup> <a name="customSqlStatements" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.customSqlStatements"></a>
 
 ```typescript
-public readonly slotName: string;
+public readonly customSqlStatements: {[ key: string ]: string};
 ```
 
-- *Type:* string
+- *Type:* {[ key: string ]: string}
 
-The slot name to inject this behavior into.
+Custom SQL statements.
 
-For more information on slotting, refer to https://docs.amplify.aws/cli/graphql/custom-business-logic/#extend-amplify-generated-resolvers
+The key is the value of the `references` attribute of the `@sql` directive in the `schema`; the value is the SQL
+to be executed.
 
 ---
 
-##### `typeName`<sup>Required</sup> <a name="typeName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.typeName"></a>
+##### `sqlLambdaLayerMapping`<sup>Optional</sup> <a name="sqlLambdaLayerMapping" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.sqlLambdaLayerMapping"></a>
 
 ```typescript
-public readonly typeName: string;
+public readonly sqlLambdaLayerMapping: {[ key: string ]: string};
 ```
 
-- *Type:* string
+- *Type:* {[ key: string ]: string}
 
-This slot type applies to the Subscription type on the Api definition.
+An optional override for the default SQL Lambda Layer.
 
 ---
 
-### TranslationBehavior <a name="TranslationBehavior" id="@aws-amplify/graphql-api-construct.TranslationBehavior"></a>
+##### `vpcConfiguration`<sup>Optional</sup> <a name="vpcConfiguration" id="@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy.property.vpcConfiguration"></a>
 
-Strongly typed set of shared parameters for all transformers, and core layer.
+```typescript
+public readonly vpcConfiguration: VpcConfig;
+```
 
-This is intended to replace feature flags, to ensure param coercion happens in
-a single location, and isn't spread around the transformers, where they can
-have different default behaviors.
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.VpcConfig">VpcConfig</a>
 
-#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.TranslationBehavior.Initializer"></a>
+The configuration of the VPC into which to install the Lambda.
+
+---
+
+### SqlModelDataSourceDbConnectionConfig <a name="SqlModelDataSourceDbConnectionConfig" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig"></a>
+
+The Secure Systems Manager parameter paths the Lambda data source will use to connect to the database.
+
+These parameters are retrieved from Secure Systems Manager in the same region as the Lambda.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.Initializer"></a>
 
 ```typescript
-import { TranslationBehavior } from '@aws-amplify/graphql-api-construct'
+import { SqlModelDataSourceDbConnectionConfig } from '@aws-amplify/graphql-api-construct'
 
-const translationBehavior: TranslationBehavior = { ... }
+const sqlModelDataSourceDbConnectionConfig: SqlModelDataSourceDbConnectionConfig = { ... }
 ```
 
 #### Properties <a name="Properties" id="Properties"></a>
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.disableResolverDeduping">disableResolverDeduping</a></code> | <code>boolean</code> | Disable resolver deduping, this can sometimes cause problems because dedupe ordering isn't stable today, which can lead to circular dependencies across stacks if models are reordered. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableAutoIndexQueryNames">enableAutoIndexQueryNames</a></code> | <code>boolean</code> | Automate generation of query names, and as a result attaching all indexes as queries to the generated Api. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableSearchNodeToNodeEncryption">enableSearchNodeToNodeEncryption</a></code> | <code>boolean</code> | If enabled, set nodeToNodeEncryption on the searchable domain (if one exists). |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableTransformerCfnOutputs">enableTransformerCfnOutputs</a></code> | <code>boolean</code> | When enabled, internal cfn outputs which existed in Amplify-generated apps will continue to be emitted. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.populateOwnerFieldForStaticGroupAuth">populateOwnerFieldForStaticGroupAuth</a></code> | <code>boolean</code> | Ensure that the owner field is still populated even if a static iam or group authorization applies. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.respectPrimaryKeyAttributesOnConnectionField">respectPrimaryKeyAttributesOnConnectionField</a></code> | <code>boolean</code> | Enable custom primary key support, there's no good reason to disable this unless trying not to update a legacy app. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.sandboxModeEnabled">sandboxModeEnabled</a></code> | <code>boolean</code> | Enabling sandbox mode will enable api key auth on all models in the transformed schema. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.secondaryKeyAsGSI">secondaryKeyAsGSI</a></code> | <code>boolean</code> | If disabled, generated. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.shouldDeepMergeDirectiveConfigDefaults">shouldDeepMergeDirectiveConfigDefaults</a></code> | <code>boolean</code> | Restore parity w/ GQLv1. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.suppressApiKeyGeneration">suppressApiKeyGeneration</a></code> | <code>boolean</code> | If enabled, disable api key resource generation even if specified as an auth rule on the construct. |
-| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.useSubUsernameForDefaultIdentityClaim">useSubUsernameForDefaultIdentityClaim</a></code> | <code>boolean</code> | Ensure that oidc and userPool auth use the `sub` field in the for the username field, which disallows new users with the same id to access data from a deleted user in the pool. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.databaseNameSsmPath">databaseNameSsmPath</a></code> | <code>string</code> | The Secure Systems Manager parameter containing the database name. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.hostnameSsmPath">hostnameSsmPath</a></code> | <code>string</code> | The Secure Systems Manager parameter containing the hostname of the database. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.passwordSsmPath">passwordSsmPath</a></code> | <code>string</code> | The Secure Systems Manager parameter containing the password to use when connecting to the database. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.portSsmPath">portSsmPath</a></code> | <code>string</code> | The Secure Systems Manager parameter containing the port number of the database proxy, cluster, or instance. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.usernameSsmPath">usernameSsmPath</a></code> | <code>string</code> | The Secure Systems Manager parameter containing the username to use when connecting to the database. |
 
 ---
 
-##### `disableResolverDeduping`<sup>Required</sup> <a name="disableResolverDeduping" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.disableResolverDeduping"></a>
+##### `databaseNameSsmPath`<sup>Required</sup> <a name="databaseNameSsmPath" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.databaseNameSsmPath"></a>
 
 ```typescript
-public readonly disableResolverDeduping: boolean;
+public readonly databaseNameSsmPath: string;
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* string
 
-Disable resolver deduping, this can sometimes cause problems because dedupe ordering isn't stable today, which can lead to circular dependencies across stacks if models are reordered.
+The Secure Systems Manager parameter containing the database name.
 
 ---
 
-##### `enableAutoIndexQueryNames`<sup>Required</sup> <a name="enableAutoIndexQueryNames" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableAutoIndexQueryNames"></a>
+##### `hostnameSsmPath`<sup>Required</sup> <a name="hostnameSsmPath" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.hostnameSsmPath"></a>
 
 ```typescript
-public readonly enableAutoIndexQueryNames: boolean;
+public readonly hostnameSsmPath: string;
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* string
 
-Automate generation of query names, and as a result attaching all indexes as queries to the generated Api.
+The Secure Systems Manager parameter containing the hostname of the database.
 
-If enabled,
+For RDS-based SQL data sources, this can be the hostname
+of a database proxy, cluster, or instance.
 
 ---
 
-##### `enableSearchNodeToNodeEncryption`<sup>Required</sup> <a name="enableSearchNodeToNodeEncryption" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableSearchNodeToNodeEncryption"></a>
+##### `passwordSsmPath`<sup>Required</sup> <a name="passwordSsmPath" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.passwordSsmPath"></a>
 
 ```typescript
-public readonly enableSearchNodeToNodeEncryption: boolean;
+public readonly passwordSsmPath: string;
 ```
 
-- *Type:* boolean
-- *Default:* false
-
-If enabled, set nodeToNodeEncryption on the searchable domain (if one exists).
+- *Type:* string
 
-Not recommended for use, prefer
-to use `Object.values(resources.additionalResources['AWS::Elasticsearch::Domain']).forEach((domain: CfnDomain) => {
-  domain.NodeToNodeEncryptionOptions = { Enabled: True };
-});
+The Secure Systems Manager parameter containing the password to use when connecting to the database.
 
 ---
 
-##### `enableTransformerCfnOutputs`<sup>Required</sup> <a name="enableTransformerCfnOutputs" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableTransformerCfnOutputs"></a>
+##### `portSsmPath`<sup>Required</sup> <a name="portSsmPath" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.portSsmPath"></a>
 
 ```typescript
-public readonly enableTransformerCfnOutputs: boolean;
+public readonly portSsmPath: string;
 ```
 
-- *Type:* boolean
-- *Default:* false
+- *Type:* string
 
-When enabled, internal cfn outputs which existed in Amplify-generated apps will continue to be emitted.
+The Secure Systems Manager parameter containing the port number of the database proxy, cluster, or instance.
 
 ---
 
-##### `populateOwnerFieldForStaticGroupAuth`<sup>Required</sup> <a name="populateOwnerFieldForStaticGroupAuth" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.populateOwnerFieldForStaticGroupAuth"></a>
+##### `usernameSsmPath`<sup>Required</sup> <a name="usernameSsmPath" id="@aws-amplify/graphql-api-construct.SqlModelDataSourceDbConnectionConfig.property.usernameSsmPath"></a>
 
 ```typescript
-public readonly populateOwnerFieldForStaticGroupAuth: boolean;
+public readonly usernameSsmPath: string;
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* string
 
-Ensure that the owner field is still populated even if a static iam or group authorization applies.
+The Secure Systems Manager parameter containing the username to use when connecting to the database.
 
 ---
 
-##### `respectPrimaryKeyAttributesOnConnectionField`<sup>Required</sup> <a name="respectPrimaryKeyAttributesOnConnectionField" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.respectPrimaryKeyAttributesOnConnectionField"></a>
+### SSESpecification <a name="SSESpecification" id="@aws-amplify/graphql-api-construct.SSESpecification"></a>
+
+Represents the settings used to enable server-side encryption.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SSESpecification.Initializer"></a>
 
 ```typescript
-public readonly respectPrimaryKeyAttributesOnConnectionField: boolean;
+import { SSESpecification } from '@aws-amplify/graphql-api-construct'
+
+const sSESpecification: SSESpecification = { ... }
 ```
 
-- *Type:* boolean
-- *Default:* true
+#### Properties <a name="Properties" id="Properties"></a>
 
-Enable custom primary key support, there's no good reason to disable this unless trying not to update a legacy app.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.SSESpecification.property.sseEnabled">sseEnabled</a></code> | <code>boolean</code> | Indicates whether server-side encryption is done using an AWS managed key or an AWS owned key. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SSESpecification.property.kmsMasterKeyId">kmsMasterKeyId</a></code> | <code>string</code> | The AWS KMS key that should be used for the AWS KMS encryption. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SSESpecification.property.sseType">sseType</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.SSEType">SSEType</a></code> | Server-side encryption type. |
 
 ---
 
-##### `sandboxModeEnabled`<sup>Required</sup> <a name="sandboxModeEnabled" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.sandboxModeEnabled"></a>
+##### `sseEnabled`<sup>Required</sup> <a name="sseEnabled" id="@aws-amplify/graphql-api-construct.SSESpecification.property.sseEnabled"></a>
 
 ```typescript
-public readonly sandboxModeEnabled: boolean;
+public readonly sseEnabled: boolean;
 ```
 
 - *Type:* boolean
-- *Default:* false
 
-Enabling sandbox mode will enable api key auth on all models in the transformed schema.
+Indicates whether server-side encryption is done using an AWS managed key or an AWS owned key.
+
+If enabled (true), server-side encryption type is set to `KMS` and an AWS managed key is used ( AWS KMS charges apply).
+If disabled (false) or not specified, server-side encryption is set to AWS owned key.
 
 ---
 
-##### `secondaryKeyAsGSI`<sup>Required</sup> <a name="secondaryKeyAsGSI" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.secondaryKeyAsGSI"></a>
+##### `kmsMasterKeyId`<sup>Optional</sup> <a name="kmsMasterKeyId" id="@aws-amplify/graphql-api-construct.SSESpecification.property.kmsMasterKeyId"></a>
 
 ```typescript
-public readonly secondaryKeyAsGSI: boolean;
+public readonly kmsMasterKeyId: string;
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* string
 
-If disabled, generated.
+The AWS KMS key that should be used for the AWS KMS encryption.
+
+To specify a key, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. Note that you should only provide
+this parameter if the key is different from the default DynamoDB key `alias/aws/dynamodb` .
 
 ---
 
-##### `shouldDeepMergeDirectiveConfigDefaults`<sup>Required</sup> <a name="shouldDeepMergeDirectiveConfigDefaults" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.shouldDeepMergeDirectiveConfigDefaults"></a>
+##### `sseType`<sup>Optional</sup> <a name="sseType" id="@aws-amplify/graphql-api-construct.SSESpecification.property.sseType"></a>
 
 ```typescript
-public readonly shouldDeepMergeDirectiveConfigDefaults: boolean;
+public readonly sseType: SSEType;
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.SSEType">SSEType</a>
 
-Restore parity w/ GQLv1.
+Server-side encryption type.
+
+The only supported value is:
+`KMS` Server-side encryption that uses AWS Key Management Service.
+  The key is stored in your account and is managed by AWS KMS ( AWS KMS charges apply).
 
 ---
 
-##### `suppressApiKeyGeneration`<sup>Required</sup> <a name="suppressApiKeyGeneration" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.suppressApiKeyGeneration"></a>
+### StreamSpecification <a name="StreamSpecification" id="@aws-amplify/graphql-api-construct.StreamSpecification"></a>
+
+Represents the DynamoDB Streams configuration for a table in DynamoDB.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.StreamSpecification.Initializer"></a>
 
 ```typescript
-public readonly suppressApiKeyGeneration: boolean;
-```
+import { StreamSpecification } from '@aws-amplify/graphql-api-construct'
 
-- *Type:* boolean
-- *Default:* false
+const streamSpecification: StreamSpecification = { ... }
+```
 
-If enabled, disable api key resource generation even if specified as an auth rule on the construct.
+#### Properties <a name="Properties" id="Properties"></a>
 
-This is a legacy parameter from the Graphql Transformer existing in Amplify CLI, not recommended to change.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.StreamSpecification.property.streamViewType">streamViewType</a></code> | <code>aws-cdk-lib.aws_dynamodb.StreamViewType</code> | When an item in the table is modified, `StreamViewType` determines what information is written to the stream for this table. |
 
 ---
 
-##### `useSubUsernameForDefaultIdentityClaim`<sup>Required</sup> <a name="useSubUsernameForDefaultIdentityClaim" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.useSubUsernameForDefaultIdentityClaim"></a>
+##### `streamViewType`<sup>Required</sup> <a name="streamViewType" id="@aws-amplify/graphql-api-construct.StreamSpecification.property.streamViewType"></a>
 
 ```typescript
-public readonly useSubUsernameForDefaultIdentityClaim: boolean;
+public readonly streamViewType: StreamViewType;
+```
+
+- *Type:* aws-cdk-lib.aws_dynamodb.StreamViewType
+
+When an item in the table is modified, `StreamViewType` determines what information is written to the stream for this table.
+
+Valid values for `StreamViewType` are:
+- `KEYS_ONLY` - Only the key attributes of the modified item are written to the stream.
+- `NEW_IMAGE` - The entire item, as it appears after it was modified, is written to the stream.
+- `OLD_IMAGE` - The entire item, as it appeared before it was modified, is written to the stream.
+- `NEW_AND_OLD_IMAGES` - Both the new and the old item images of the item are written to the stream.
+
+---
+
+### SubnetAvailabilityZone <a name="SubnetAvailabilityZone" id="@aws-amplify/graphql-api-construct.SubnetAvailabilityZone"></a>
+
+Subnet configuration for VPC endpoints used by a Lambda resolver for a SQL-based data source.
+
+Although it is possible to create multiple
+subnets in a single availability zone, VPC service endpoints may only be deployed to a single subnet in a given availability zone. This
+structure ensures that the Lambda function and VPC service endpoints are mutually consistent.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SubnetAvailabilityZone.Initializer"></a>
+
+```typescript
+import { SubnetAvailabilityZone } from '@aws-amplify/graphql-api-construct'
+
+const subnetAvailabilityZone: SubnetAvailabilityZone = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubnetAvailabilityZone.property.availabilityZone">availabilityZone</a></code> | <code>string</code> | The availability zone of the subnet. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubnetAvailabilityZone.property.subnetId">subnetId</a></code> | <code>string</code> | The subnet ID to install the Lambda data source in. |
+
+---
+
+##### `availabilityZone`<sup>Required</sup> <a name="availabilityZone" id="@aws-amplify/graphql-api-construct.SubnetAvailabilityZone.property.availabilityZone"></a>
+
+```typescript
+public readonly availabilityZone: string;
+```
+
+- *Type:* string
+
+The availability zone of the subnet.
+
+---
+
+##### `subnetId`<sup>Required</sup> <a name="subnetId" id="@aws-amplify/graphql-api-construct.SubnetAvailabilityZone.property.subnetId"></a>
+
+```typescript
+public readonly subnetId: string;
+```
+
+- *Type:* string
+
+The subnet ID to install the Lambda data source in.
+
+---
+
+### SubscriptionFunctionSlot <a name="SubscriptionFunctionSlot" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot"></a>
+
+Slot types for Subscription Resolvers.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.Initializer"></a>
+
+```typescript
+import { SubscriptionFunctionSlot } from '@aws-amplify/graphql-api-construct'
+
+const subscriptionFunctionSlot: SubscriptionFunctionSlot = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.fieldName">fieldName</a></code> | <code>string</code> | The field to attach this function to on the Api definition. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.function">function</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.FunctionSlotOverride">FunctionSlotOverride</a></code> | The overridden behavior for this slot. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotIndex">slotIndex</a></code> | <code>number</code> | The slot index to use to inject this into the execution pipeline. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotName">slotName</a></code> | <code>string</code> | The slot name to inject this behavior into. |
+| <code><a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.typeName">typeName</a></code> | <code>string</code> | This slot type applies to the Subscription type on the Api definition. |
+
+---
+
+##### `fieldName`<sup>Required</sup> <a name="fieldName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.fieldName"></a>
+
+```typescript
+public readonly fieldName: string;
+```
+
+- *Type:* string
+
+The field to attach this function to on the Api definition.
+
+---
+
+##### `function`<sup>Required</sup> <a name="function" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.function"></a>
+
+```typescript
+public readonly function: FunctionSlotOverride;
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.FunctionSlotOverride">FunctionSlotOverride</a>
+
+The overridden behavior for this slot.
+
+---
+
+##### `slotIndex`<sup>Required</sup> <a name="slotIndex" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotIndex"></a>
+
+```typescript
+public readonly slotIndex: number;
+```
+
+- *Type:* number
+
+The slot index to use to inject this into the execution pipeline.
+
+For more information on slotting, refer to https://docs.amplify.aws/cli/graphql/custom-business-logic/#extend-amplify-generated-resolvers
+
+---
+
+##### `slotName`<sup>Required</sup> <a name="slotName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.slotName"></a>
+
+```typescript
+public readonly slotName: string;
+```
+
+- *Type:* string
+
+The slot name to inject this behavior into.
+
+For more information on slotting, refer to https://docs.amplify.aws/cli/graphql/custom-business-logic/#extend-amplify-generated-resolvers
+
+---
+
+##### `typeName`<sup>Required</sup> <a name="typeName" id="@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot.property.typeName"></a>
+
+```typescript
+public readonly typeName: string;
+```
+
+- *Type:* string
+
+This slot type applies to the Subscription type on the Api definition.
+
+---
+
+### TimeToLiveSpecification <a name="TimeToLiveSpecification" id="@aws-amplify/graphql-api-construct.TimeToLiveSpecification"></a>
+
+Shape for TTL config.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.TimeToLiveSpecification.Initializer"></a>
+
+```typescript
+import { TimeToLiveSpecification } from '@aws-amplify/graphql-api-construct'
+
+const timeToLiveSpecification: TimeToLiveSpecification = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.TimeToLiveSpecification.property.enabled">enabled</a></code> | <code>boolean</code> | Boolean determining if the ttl is enabled or not. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TimeToLiveSpecification.property.attributeName">attributeName</a></code> | <code>string</code> | Attribute name to apply to the ttl spec. |
+
+---
+
+##### `enabled`<sup>Required</sup> <a name="enabled" id="@aws-amplify/graphql-api-construct.TimeToLiveSpecification.property.enabled"></a>
+
+```typescript
+public readonly enabled: boolean;
+```
+
+- *Type:* boolean
+
+Boolean determining if the ttl is enabled or not.
+
+---
+
+##### `attributeName`<sup>Optional</sup> <a name="attributeName" id="@aws-amplify/graphql-api-construct.TimeToLiveSpecification.property.attributeName"></a>
+
+```typescript
+public readonly attributeName: string;
+```
+
+- *Type:* string
+
+Attribute name to apply to the ttl spec.
+
+---
+
+### TranslationBehavior <a name="TranslationBehavior" id="@aws-amplify/graphql-api-construct.TranslationBehavior"></a>
+
+Strongly typed set of shared parameters for all transformers, and core layer.
+
+This is intended to replace feature flags, to ensure param coercion happens in
+a single location, and isn't spread around the transformers, where they can
+have different default behaviors.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.TranslationBehavior.Initializer"></a>
+
+```typescript
+import { TranslationBehavior } from '@aws-amplify/graphql-api-construct'
+
+const translationBehavior: TranslationBehavior = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.allowDestructiveGraphqlSchemaUpdates">allowDestructiveGraphqlSchemaUpdates</a></code> | <code>boolean</code> | The following schema updates require replacement of the underlying DynamoDB table:. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.disableResolverDeduping">disableResolverDeduping</a></code> | <code>boolean</code> | Disable resolver deduping, this can sometimes cause problems because dedupe ordering isn't stable today, which can lead to circular dependencies across stacks if models are reordered. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableAutoIndexQueryNames">enableAutoIndexQueryNames</a></code> | <code>boolean</code> | Automate generation of query names, and as a result attaching all indexes as queries to the generated Api. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableSearchNodeToNodeEncryption">enableSearchNodeToNodeEncryption</a></code> | <code>boolean</code> | *No description.* |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableTransformerCfnOutputs">enableTransformerCfnOutputs</a></code> | <code>boolean</code> | When enabled, internal cfn outputs which existed in Amplify-generated apps will continue to be emitted. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.populateOwnerFieldForStaticGroupAuth">populateOwnerFieldForStaticGroupAuth</a></code> | <code>boolean</code> | Ensure that the owner field is still populated even if a static iam or group authorization applies. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.respectPrimaryKeyAttributesOnConnectionField">respectPrimaryKeyAttributesOnConnectionField</a></code> | <code>boolean</code> | Enable custom primary key support, there's no good reason to disable this unless trying not to update a legacy app. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.sandboxModeEnabled">sandboxModeEnabled</a></code> | <code>boolean</code> | Enabling sandbox mode will enable api key auth on all models in the transformed schema. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.secondaryKeyAsGSI">secondaryKeyAsGSI</a></code> | <code>boolean</code> | If disabled, generated. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.shouldDeepMergeDirectiveConfigDefaults">shouldDeepMergeDirectiveConfigDefaults</a></code> | <code>boolean</code> | Restore parity w/ GQLv1. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.suppressApiKeyGeneration">suppressApiKeyGeneration</a></code> | <code>boolean</code> | If enabled, disable api key resource generation even if specified as an auth rule on the construct. |
+| <code><a href="#@aws-amplify/graphql-api-construct.TranslationBehavior.property.useSubUsernameForDefaultIdentityClaim">useSubUsernameForDefaultIdentityClaim</a></code> | <code>boolean</code> | Ensure that oidc and userPool auth use the `sub` field in the for the username field, which disallows new users with the same id to access data from a deleted user in the pool. |
+
+---
+
+##### `allowDestructiveGraphqlSchemaUpdates`<sup>Required</sup> <a name="allowDestructiveGraphqlSchemaUpdates" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.allowDestructiveGraphqlSchemaUpdates"></a>
+
+```typescript
+public readonly allowDestructiveGraphqlSchemaUpdates: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+The following schema updates require replacement of the underlying DynamoDB table:.
+
+Removing or renaming a model
+ - Modifying the primary key of a model
+ - Modifying a Local Secondary Index of a model (only applies to projects with secondaryKeyAsGSI turned off)
+
+ALL DATA WILL BE LOST when the table replacement happens. When enabled, destructive updates are allowed.
+This will only affect DynamoDB tables with provision strategy "AMPLIFY_TABLE".
+
+---
+
+##### `disableResolverDeduping`<sup>Required</sup> <a name="disableResolverDeduping" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.disableResolverDeduping"></a>
+
+```typescript
+public readonly disableResolverDeduping: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Disable resolver deduping, this can sometimes cause problems because dedupe ordering isn't stable today, which can lead to circular dependencies across stacks if models are reordered.
+
+---
+
+##### `enableAutoIndexQueryNames`<sup>Required</sup> <a name="enableAutoIndexQueryNames" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableAutoIndexQueryNames"></a>
+
+```typescript
+public readonly enableAutoIndexQueryNames: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Automate generation of query names, and as a result attaching all indexes as queries to the generated Api.
+
+If enabled,
+
+---
+
+##### `enableSearchNodeToNodeEncryption`<sup>Required</sup> <a name="enableSearchNodeToNodeEncryption" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableSearchNodeToNodeEncryption"></a>
+
+```typescript
+public readonly enableSearchNodeToNodeEncryption: boolean;
+```
+
+- *Type:* boolean
+
+---
+
+##### `enableTransformerCfnOutputs`<sup>Required</sup> <a name="enableTransformerCfnOutputs" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.enableTransformerCfnOutputs"></a>
+
+```typescript
+public readonly enableTransformerCfnOutputs: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+When enabled, internal cfn outputs which existed in Amplify-generated apps will continue to be emitted.
+
+---
+
+##### `populateOwnerFieldForStaticGroupAuth`<sup>Required</sup> <a name="populateOwnerFieldForStaticGroupAuth" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.populateOwnerFieldForStaticGroupAuth"></a>
+
+```typescript
+public readonly populateOwnerFieldForStaticGroupAuth: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Ensure that the owner field is still populated even if a static iam or group authorization applies.
+
+---
+
+##### `respectPrimaryKeyAttributesOnConnectionField`<sup>Required</sup> <a name="respectPrimaryKeyAttributesOnConnectionField" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.respectPrimaryKeyAttributesOnConnectionField"></a>
+
+```typescript
+public readonly respectPrimaryKeyAttributesOnConnectionField: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Enable custom primary key support, there's no good reason to disable this unless trying not to update a legacy app.
+
+---
+
+##### `sandboxModeEnabled`<sup>Required</sup> <a name="sandboxModeEnabled" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.sandboxModeEnabled"></a>
+
+```typescript
+public readonly sandboxModeEnabled: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Enabling sandbox mode will enable api key auth on all models in the transformed schema.
+
+---
+
+##### `secondaryKeyAsGSI`<sup>Required</sup> <a name="secondaryKeyAsGSI" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.secondaryKeyAsGSI"></a>
+
+```typescript
+public readonly secondaryKeyAsGSI: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+If disabled, generated.
+
+---
+
+##### `shouldDeepMergeDirectiveConfigDefaults`<sup>Required</sup> <a name="shouldDeepMergeDirectiveConfigDefaults" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.shouldDeepMergeDirectiveConfigDefaults"></a>
+
+```typescript
+public readonly shouldDeepMergeDirectiveConfigDefaults: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Restore parity w/ GQLv1.
+
+---
+
+##### `suppressApiKeyGeneration`<sup>Required</sup> <a name="suppressApiKeyGeneration" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.suppressApiKeyGeneration"></a>
+
+```typescript
+public readonly suppressApiKeyGeneration: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+If enabled, disable api key resource generation even if specified as an auth rule on the construct.
+
+This is a legacy parameter from the Graphql Transformer existing in Amplify CLI, not recommended to change.
+
+---
+
+##### `useSubUsernameForDefaultIdentityClaim`<sup>Required</sup> <a name="useSubUsernameForDefaultIdentityClaim" id="@aws-amplify/graphql-api-construct.TranslationBehavior.property.useSubUsernameForDefaultIdentityClaim"></a>
+
+```typescript
+public readonly useSubUsernameForDefaultIdentityClaim: boolean;
 ```
 
 - *Type:* boolean
@@ -2639,8 +3207,261 @@ The Cognito User Pool which is used to authenticated JWT tokens, and vends group
 
 ---
 
+### VpcConfig <a name="VpcConfig" id="@aws-amplify/graphql-api-construct.VpcConfig"></a>
+
+Configuration of the VPC in which to install a Lambda to resolve queries against a SQL-based data source.
+
+The SQL Lambda will be deployed
+into the specified VPC, subnets, and security groups. The specified subnets and security groups must be in the same VPC. The VPC must
+have at least one subnet. The construct will also create VPC service endpoints in the specified subnets, as well as inbound security
+rules, to allow traffic on port 443 within each security group. This allows the Lambda to read database connection information from
+Secure Systems Manager.
+
+#### Initializer <a name="Initializer" id="@aws-amplify/graphql-api-construct.VpcConfig.Initializer"></a>
+
+```typescript
+import { VpcConfig } from '@aws-amplify/graphql-api-construct'
+
+const vpcConfig: VpcConfig = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.VpcConfig.property.securityGroupIds">securityGroupIds</a></code> | <code>string[]</code> | The security groups to install the Lambda data source in. |
+| <code><a href="#@aws-amplify/graphql-api-construct.VpcConfig.property.subnetAvailabilityZoneConfig">subnetAvailabilityZoneConfig</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.SubnetAvailabilityZone">SubnetAvailabilityZone</a>[]</code> | The subnets to install the Lambda data source in, one per availability zone. |
+| <code><a href="#@aws-amplify/graphql-api-construct.VpcConfig.property.vpcId">vpcId</a></code> | <code>string</code> | The VPC to install the Lambda data source in. |
+
+---
+
+##### `securityGroupIds`<sup>Required</sup> <a name="securityGroupIds" id="@aws-amplify/graphql-api-construct.VpcConfig.property.securityGroupIds"></a>
+
+```typescript
+public readonly securityGroupIds: string[];
+```
+
+- *Type:* string[]
+
+The security groups to install the Lambda data source in.
+
+---
+
+##### `subnetAvailabilityZoneConfig`<sup>Required</sup> <a name="subnetAvailabilityZoneConfig" id="@aws-amplify/graphql-api-construct.VpcConfig.property.subnetAvailabilityZoneConfig"></a>
+
+```typescript
+public readonly subnetAvailabilityZoneConfig: SubnetAvailabilityZone[];
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.SubnetAvailabilityZone">SubnetAvailabilityZone</a>[]
+
+The subnets to install the Lambda data source in, one per availability zone.
+
+---
+
+##### `vpcId`<sup>Required</sup> <a name="vpcId" id="@aws-amplify/graphql-api-construct.VpcConfig.property.vpcId"></a>
+
+```typescript
+public readonly vpcId: string;
+```
+
+- *Type:* string
+
+The VPC to install the Lambda data source in.
+
+---
+
 ## Classes <a name="Classes" id="Classes"></a>
 
+### AmplifyDynamoDbTableWrapper <a name="AmplifyDynamoDbTableWrapper" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper"></a>
+
+Wrapper class around Custom::AmplifyDynamoDBTable custom resource, to simplify the override experience a bit.
+
+This is NOT a construct, just an easier way to access
+the generated construct.
+This is a wrapper intended to mimic the `aws_cdk_lib.aws_dynamodb.Table` functionality more-or-less.
+Notable differences is the addition of TKTK properties, to account for the fact that they're constructor props
+in the CDK construct, as well as the removal of all from*, grant*, and metric* methods implemented by Table.
+
+#### Initializers <a name="Initializers" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.Initializer"></a>
+
+```typescript
+import { AmplifyDynamoDbTableWrapper } from '@aws-amplify/graphql-api-construct'
+
+new AmplifyDynamoDbTableWrapper(resource: CfnResource)
+```
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.Initializer.parameter.resource">resource</a></code> | <code>aws-cdk-lib.CfnResource</code> | the Cfn resource. |
+
+---
+
+##### `resource`<sup>Required</sup> <a name="resource" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.Initializer.parameter.resource"></a>
+
+- *Type:* aws-cdk-lib.CfnResource
+
+the Cfn resource.
+
+---
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.setGlobalSecondaryIndexProvisionedThroughput">setGlobalSecondaryIndexProvisionedThroughput</a></code> | Set the provisionedThroughtput for a specified GSI by name. |
+
+---
+
+##### `setGlobalSecondaryIndexProvisionedThroughput` <a name="setGlobalSecondaryIndexProvisionedThroughput" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.setGlobalSecondaryIndexProvisionedThroughput"></a>
+
+```typescript
+public setGlobalSecondaryIndexProvisionedThroughput(indexName: string, provisionedThroughput: ProvisionedThroughput): void
+```
+
+Set the provisionedThroughtput for a specified GSI by name.
+
+###### `indexName`<sup>Required</sup> <a name="indexName" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.setGlobalSecondaryIndexProvisionedThroughput.parameter.indexName"></a>
+
+- *Type:* string
+
+the index to specify a provisionedThroughput config for.
+
+---
+
+###### `provisionedThroughput`<sup>Required</sup> <a name="provisionedThroughput" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.setGlobalSecondaryIndexProvisionedThroughput.parameter.provisionedThroughput"></a>
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.ProvisionedThroughput">ProvisionedThroughput</a>
+
+the config to set.
+
+---
+
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.isAmplifyDynamoDbTableResource">isAmplifyDynamoDbTableResource</a></code> | Return true and perform type narrowing if a given input appears to be capable of. |
+
+---
+
+##### `isAmplifyDynamoDbTableResource` <a name="isAmplifyDynamoDbTableResource" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.isAmplifyDynamoDbTableResource"></a>
+
+```typescript
+import { AmplifyDynamoDbTableWrapper } from '@aws-amplify/graphql-api-construct'
+
+AmplifyDynamoDbTableWrapper.isAmplifyDynamoDbTableResource(x: any)
+```
+
+Return true and perform type narrowing if a given input appears to be capable of.
+
+###### `x`<sup>Required</sup> <a name="x" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.isAmplifyDynamoDbTableResource.parameter.x"></a>
+
+- *Type:* any
+
+the object to check.
+
+---
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.billingMode">billingMode</a></code> | <code>aws-cdk-lib.aws_dynamodb.BillingMode</code> | Specify how you are charged for read and write throughput and how you manage capacity. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.deletionProtectionEnabled">deletionProtectionEnabled</a></code> | <code>boolean</code> | Set table deletion protection. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.pointInTimeRecoveryEnabled">pointInTimeRecoveryEnabled</a></code> | <code>boolean</code> | Whether point-in-time recovery is enabled. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.provisionedThroughput">provisionedThroughput</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.ProvisionedThroughput">ProvisionedThroughput</a></code> | Update the provisioned throughput for the base table. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.sseSpecification">sseSpecification</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.SSESpecification">SSESpecification</a></code> | Set the ddb server-side encryption specification on the table. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.streamSpecification">streamSpecification</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.StreamSpecification">StreamSpecification</a></code> | Set the ddb stream specification on the table. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.timeToLiveAttribute">timeToLiveAttribute</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.TimeToLiveSpecification">TimeToLiveSpecification</a></code> | The name of TTL attribute. |
+
+---
+
+##### `billingMode`<sup>Required</sup> <a name="billingMode" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.billingMode"></a>
+
+```typescript
+public readonly billingMode: BillingMode;
+```
+
+- *Type:* aws-cdk-lib.aws_dynamodb.BillingMode
+
+Specify how you are charged for read and write throughput and how you manage capacity.
+
+---
+
+##### `deletionProtectionEnabled`<sup>Required</sup> <a name="deletionProtectionEnabled" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.deletionProtectionEnabled"></a>
+
+```typescript
+public readonly deletionProtectionEnabled: boolean;
+```
+
+- *Type:* boolean
+
+Set table deletion protection.
+
+---
+
+##### `pointInTimeRecoveryEnabled`<sup>Required</sup> <a name="pointInTimeRecoveryEnabled" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.pointInTimeRecoveryEnabled"></a>
+
+```typescript
+public readonly pointInTimeRecoveryEnabled: boolean;
+```
+
+- *Type:* boolean
+
+Whether point-in-time recovery is enabled.
+
+---
+
+##### `provisionedThroughput`<sup>Required</sup> <a name="provisionedThroughput" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.provisionedThroughput"></a>
+
+```typescript
+public readonly provisionedThroughput: ProvisionedThroughput;
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.ProvisionedThroughput">ProvisionedThroughput</a>
+
+Update the provisioned throughput for the base table.
+
+---
+
+##### `sseSpecification`<sup>Required</sup> <a name="sseSpecification" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.sseSpecification"></a>
+
+```typescript
+public readonly sseSpecification: SSESpecification;
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.SSESpecification">SSESpecification</a>
+
+Set the ddb server-side encryption specification on the table.
+
+---
+
+##### `streamSpecification`<sup>Required</sup> <a name="streamSpecification" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.streamSpecification"></a>
+
+```typescript
+public readonly streamSpecification: StreamSpecification;
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.StreamSpecification">StreamSpecification</a>
+
+Set the ddb stream specification on the table.
+
+---
+
+##### `timeToLiveAttribute`<sup>Required</sup> <a name="timeToLiveAttribute" id="@aws-amplify/graphql-api-construct.AmplifyDynamoDbTableWrapper.property.timeToLiveAttribute"></a>
+
+```typescript
+public readonly timeToLiveAttribute: TimeToLiveSpecification;
+```
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.TimeToLiveSpecification">TimeToLiveSpecification</a>
+
+The name of TTL attribute.
+
+---
+
+
 ### AmplifyGraphqlDefinition <a name="AmplifyGraphqlDefinition" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition"></a>
 
 Class exposing utilities to produce IAmplifyGraphqlDefinition objects given various inputs.
@@ -2663,11 +3484,33 @@ new AmplifyGraphqlDefinition()
 
 | **Name** | **Description** |
 | --- | --- |
-| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFiles">fromFiles</a></code> | Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.combine">combine</a></code> | Combines multiple IAmplifyGraphqlDefinitions into a single definition. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFiles">fromFiles</a></code> | Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema, binding them to a DynamoDB data source. |
+| <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFilesAndStrategy">fromFilesAndStrategy</a></code> | Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema. |
 | <code><a href="#@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromString">fromString</a></code> | Produce a schema definition from a string input. |
 
 ---
 
+##### `combine` <a name="combine" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.combine"></a>
+
+```typescript
+import { AmplifyGraphqlDefinition } from '@aws-amplify/graphql-api-construct'
+
+AmplifyGraphqlDefinition.combine(definitions: IAmplifyGraphqlDefinition[])
+```
+
+Combines multiple IAmplifyGraphqlDefinitions into a single definition.
+
+**NOTE** This API is in preview and is not recommended to use with production systems.
+
+###### `definitions`<sup>Required</sup> <a name="definitions" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.combine.parameter.definitions"></a>
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition">IAmplifyGraphqlDefinition</a>[]
+
+the definitions to combine.
+
+---
+
 ##### `fromFiles` <a name="fromFiles" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFiles"></a>
 
 ```typescript
@@ -2676,7 +3519,7 @@ import { AmplifyGraphqlDefinition } from '@aws-amplify/graphql-api-construct'
 AmplifyGraphqlDefinition.fromFiles(filePaths: string)
 ```
 
-Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema.
+Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema, binding them to a DynamoDB data source.
 
 ###### `filePaths`<sup>Required</sup> <a name="filePaths" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFiles.parameter.filePaths"></a>
 
@@ -2686,16 +3529,49 @@ one or more paths to the graphql files to process.
 
 ---
 
+##### `fromFilesAndStrategy` <a name="fromFilesAndStrategy" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFilesAndStrategy"></a>
+
+```typescript
+import { AmplifyGraphqlDefinition } from '@aws-amplify/graphql-api-construct'
+
+AmplifyGraphqlDefinition.fromFilesAndStrategy(filePaths: string | string[], dataSourceStrategy?: DefaultDynamoDbModelDataSourceStrategy | AmplifyDynamoDbModelDataSourceStrategy | SQLLambdaModelDataSourceStrategy)
+```
+
+Convert one or more appsync SchemaFile objects into an Amplify Graphql Schema.
+
+**NOTE** This API is in preview and is not recommended to use with production systems.
+
+###### `filePaths`<sup>Required</sup> <a name="filePaths" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFilesAndStrategy.parameter.filePaths"></a>
+
+- *Type:* string | string[]
+
+one or more paths to the graphql files to process.
+
+---
+
+###### `dataSourceStrategy`<sup>Optional</sup> <a name="dataSourceStrategy" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromFilesAndStrategy.parameter.dataSourceStrategy"></a>
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy">DefaultDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy">AmplifyDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy">SQLLambdaModelDataSourceStrategy</a>
+
+the provisioning definition for datasources that resolve `@model`s in this schema.
+
+The DynamoDB from
+CloudFormation will be used by default.
+
+---
+
 ##### `fromString` <a name="fromString" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromString"></a>
 
 ```typescript
 import { AmplifyGraphqlDefinition } from '@aws-amplify/graphql-api-construct'
 
-AmplifyGraphqlDefinition.fromString(schema: string)
+AmplifyGraphqlDefinition.fromString(schema: string, dataSourceStrategy?: DefaultDynamoDbModelDataSourceStrategy | AmplifyDynamoDbModelDataSourceStrategy | SQLLambdaModelDataSourceStrategy)
 ```
 
 Produce a schema definition from a string input.
 
+**NOTE** The 'dataSourceStrategy' configuration option is in preview and is not recommended to use with production systems.
+
 ###### `schema`<sup>Required</sup> <a name="schema" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromString.parameter.schema"></a>
 
 - *Type:* string
@@ -2704,6 +3580,17 @@ the graphql input as a string.
 
 ---
 
+###### `dataSourceStrategy`<sup>Optional</sup> <a name="dataSourceStrategy" id="@aws-amplify/graphql-api-construct.AmplifyGraphqlDefinition.fromString.parameter.dataSourceStrategy"></a>
+
+- *Type:* <a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy">DefaultDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy">AmplifyDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy">SQLLambdaModelDataSourceStrategy</a>
+
+the provisioning definition for datasources that resolve `@model`s in this schema.
+
+The DynamoDB from
+CloudFormation will be used by default.
+
+---
+
 
 
 ## Protocols <a name="Protocols" id="Protocols"></a>
@@ -2719,8 +3606,25 @@ Graphql Api definition, which can be implemented in multiple ways.
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.dataSourceStrategies">dataSourceStrategies</a></code> | <code>{[ key: string ]: <a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy">DefaultDynamoDbModelDataSourceStrategy</a> \| <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy">AmplifyDynamoDbModelDataSourceStrategy</a> \| <a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy">SQLLambdaModelDataSourceStrategy</a>}</code> | Retrieve the datasource strategy mapping. The default strategy is to use DynamoDB from CloudFormation. |
 | <code><a href="#@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.functionSlots">functionSlots</a></code> | <code><a href="#@aws-amplify/graphql-api-construct.MutationFunctionSlot">MutationFunctionSlot</a> \| <a href="#@aws-amplify/graphql-api-construct.QueryFunctionSlot">QueryFunctionSlot</a> \| <a href="#@aws-amplify/graphql-api-construct.SubscriptionFunctionSlot">SubscriptionFunctionSlot</a>[]</code> | Retrieve any function slots defined explicitly in the Api definition. |
 | <code><a href="#@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.schema">schema</a></code> | <code>string</code> | Return the schema definition as a graphql string, with amplify directives allowed. |
+| <code><a href="#@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.referencedLambdaFunctions">referencedLambdaFunctions</a></code> | <code>{[ key: string ]: aws-cdk-lib.aws_lambda.IFunction}</code> | Retrieve the references to any lambda functions used in the definition. |
+
+---
+
+##### `dataSourceStrategies`<sup>Required</sup> <a name="dataSourceStrategies" id="@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.dataSourceStrategies"></a>
+
+```typescript
+public readonly dataSourceStrategies: {[ key: string ]: DefaultDynamoDbModelDataSourceStrategy | AmplifyDynamoDbModelDataSourceStrategy | SQLLambdaModelDataSourceStrategy};
+```
+
+- *Type:* {[ key: string ]: <a href="#@aws-amplify/graphql-api-construct.DefaultDynamoDbModelDataSourceStrategy">DefaultDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.AmplifyDynamoDbModelDataSourceStrategy">AmplifyDynamoDbModelDataSourceStrategy</a> | <a href="#@aws-amplify/graphql-api-construct.SQLLambdaModelDataSourceStrategy">SQLLambdaModelDataSourceStrategy</a>}
+
+Retrieve the datasource strategy mapping. The default strategy is to use DynamoDB from CloudFormation.
+
+**NOTE** Explicitly specifying the 'dataSourceStrategies' configuration option is in preview and is not recommended to use with
+production systems. For production, use the static factory methods `fromString` or `fromFiles`.
 
 ---
 
@@ -2748,6 +3652,21 @@ Return the schema definition as a graphql string, with amplify directives allowe
 
 ---
 
+##### `referencedLambdaFunctions`<sup>Optional</sup> <a name="referencedLambdaFunctions" id="@aws-amplify/graphql-api-construct.IAmplifyGraphqlDefinition.property.referencedLambdaFunctions"></a>
+
+```typescript
+public readonly referencedLambdaFunctions: {[ key: string ]: IFunction};
+```
+
+- *Type:* {[ key: string ]: aws-cdk-lib.aws_lambda.IFunction}
+
+Retrieve the references to any lambda functions used in the definition.
+
+Useful for wiring through aws_lambda.Function constructs into the definition directly,
+and generated references to invoke them.
+
+---
+
 ### IBackendOutputEntry <a name="IBackendOutputEntry" id="@aws-amplify/graphql-api-construct.IBackendOutputEntry"></a>
 
 - *Implemented By:* <a href="#@aws-amplify/graphql-api-construct.IBackendOutputEntry">IBackendOutputEntry</a>
@@ -2827,3 +3746,23 @@ the record to store in the backend output.
 ---
 
 
+## Enums <a name="Enums" id="Enums"></a>
+
+### SSEType <a name="SSEType" id="@aws-amplify/graphql-api-construct.SSEType"></a>
+
+Server Side Encryption Type Values - `KMS` - Server-side encryption that uses AWS KMS.
+
+The key is stored in your account and is managed by KMS (AWS KMS charges apply).
+
+#### Members <a name="Members" id="Members"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-amplify/graphql-api-construct.SSEType.KMS">KMS</a></code> | *No description.* |
+
+---
+
+##### `KMS` <a name="KMS" id="@aws-amplify/graphql-api-construct.SSEType.KMS"></a>
+
+---
+