@aws-amplify/graphql-api-construct 1.6.0 → 1.7.0-iam-auth-with-identityPool-provider-1.0

package/.jsii

@@ -8,20 +8,20 @@
   "bundled": {
     "@aws-amplify/backend-output-schemas": "^0.4.0",
     "@aws-amplify/backend-output-storage": "^0.2.2",
-    "@aws-amplify/graphql-auth-transformer": "3.4.1",
-    "@aws-amplify/graphql-default-value-transformer": "2.3.1",
-    "@aws-amplify/graphql-function-transformer": "2.1.18",
-    "@aws-amplify/graphql-http-transformer": "2.1.18",
-    "@aws-amplify/graphql-index-transformer": "2.3.7",
-    "@aws-amplify/graphql-maps-to-transformer": "3.4.8",
-    "@aws-amplify/graphql-model-transformer": "2.6.0",
-    "@aws-amplify/graphql-predictions-transformer": "2.1.18",
-    "@aws-amplify/graphql-relational-transformer": "2.4.1",
-    "@aws-amplify/graphql-searchable-transformer": "2.6.1",
-    "@aws-amplify/graphql-sql-transformer": "0.2.7",
-    "@aws-amplify/graphql-transformer": "1.3.12",
-    "@aws-amplify/graphql-transformer-core": "2.5.0",
-    "@aws-amplify/graphql-transformer-interfaces": "3.4.0",
+    "@aws-amplify/graphql-auth-transformer": "3.5.0-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-default-value-transformer": "2.3.2-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-function-transformer": "2.1.19-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-http-transformer": "2.1.19-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-index-transformer": "2.3.8-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-maps-to-transformer": "3.4.9-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-model-transformer": "2.6.1-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-predictions-transformer": "2.1.19-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-relational-transformer": "2.4.2-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-searchable-transformer": "2.6.2-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-sql-transformer": "0.2.8-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-transformer": "1.3.13-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-transformer-core": "2.5.1-iam-auth-with-identityPool-provider-1.0",
+    "@aws-amplify/graphql-transformer-interfaces": "3.4.1-iam-auth-with-identityPool-provider-1.0",
     "@aws-amplify/platform-core": "^0.2.0",
     "@aws-amplify/plugin-types": "^0.4.1",
     "charenc": "^0.0.2",
@@ -29,8 +29,8 @@
     "fs-extra": "^8.1.0",
     "graceful-fs": "^4.2.11",
     "graphql": "^15.5.0",
-    "graphql-mapping-template": "4.20.15",
-    "graphql-transformer-common": "4.28.1",
+    "graphql-mapping-template": "4.20.16-iam-auth-with-identityPool-provider-1.0",
+    "graphql-transformer-common": "4.28.2-iam-auth-with-identityPool-provider-1.0",
     "hjson": "^3.2.2",
     "immer": "^9.0.12",
     "is-buffer": "^2.0.5",
@@ -3536,7 +3536,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 795
+        "line": 846
       },
       "name": "AddFunctionProps",
       "properties": [
@@ -3549,7 +3549,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 799
+            "line": 850
           },
           "name": "dataSource",
           "type": {
@@ -3565,7 +3565,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 804
+            "line": 855
           },
           "name": "name",
           "type": {
@@ -3582,7 +3582,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 839
+            "line": 890
           },
           "name": "code",
           "optional": true,
@@ -3600,7 +3600,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 811
+            "line": 862
           },
           "name": "description",
           "optional": true,
@@ -3618,7 +3618,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 818
+            "line": 869
           },
           "name": "requestMappingTemplate",
           "optional": true,
@@ -3636,7 +3636,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 825
+            "line": 876
           },
           "name": "responseMappingTemplate",
           "optional": true,
@@ -3654,7 +3654,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 832
+            "line": 883
           },
           "name": "runtime",
           "optional": true,
@@ -3950,7 +3950,7 @@
         },
         "locationInModule": {
           "filename": "src/amplify-graphql-api.ts",
-          "line": 139
+          "line": 140
         },
         "parameters": [
           {
@@ -3985,7 +3985,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/amplify-graphql-api.ts",
-        "line": 85
+        "line": 86
       },
       "methods": [
         {
@@ -3997,7 +3997,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 285
+            "line": 287
           },
           "name": "addDynamoDbDataSource",
           "parameters": [
@@ -4046,7 +4046,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 297
+            "line": 299
           },
           "name": "addElasticsearchDataSource",
           "parameters": [
@@ -4093,7 +4093,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 307
+            "line": 309
           },
           "name": "addEventBridgeDataSource",
           "parameters": [
@@ -4140,7 +4140,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 389
+            "line": 391
           },
           "name": "addFunction",
           "parameters": [
@@ -4175,7 +4175,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 318
+            "line": 320
           },
           "name": "addHttpDataSource",
           "parameters": [
@@ -4223,7 +4223,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 329
+            "line": 331
           },
           "name": "addLambdaDataSource",
           "parameters": [
@@ -4271,7 +4271,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 340
+            "line": 342
           },
           "name": "addNoneDataSource",
           "parameters": [
@@ -4310,7 +4310,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 351
+            "line": 353
           },
           "name": "addOpenSearchDataSource",
           "parameters": [
@@ -4358,7 +4358,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 364
+            "line": 366
           },
           "name": "addRdsDataSource",
           "parameters": [
@@ -4425,7 +4425,7 @@
           },
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 380
+            "line": 382
           },
           "name": "addResolver",
           "parameters": [
@@ -4466,7 +4466,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 120
+            "line": 121
           },
           "name": "apiId",
           "type": {
@@ -4481,7 +4481,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 100
+            "line": 101
           },
           "name": "generatedFunctionSlots",
           "type": {
@@ -4514,7 +4514,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 105
+            "line": 106
           },
           "name": "graphqlUrl",
           "type": {
@@ -4530,7 +4530,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 110
+            "line": 111
           },
           "name": "realtimeUrl",
           "type": {
@@ -4545,7 +4545,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 89
+            "line": 90
           },
           "name": "resources",
           "type": {
@@ -4561,7 +4561,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/amplify-graphql-api.ts",
-            "line": 115
+            "line": 116
           },
           "name": "apiKey",
           "optional": true,
@@ -4584,7 +4584,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 698
+        "line": 749
       },
       "name": "AmplifyGraphqlApiCfnResources",
       "properties": [
@@ -4597,7 +4597,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 752
+            "line": 803
           },
           "name": "additionalCfnResources",
           "type": {
@@ -4618,7 +4618,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 737
+            "line": 788
           },
           "name": "amplifyDynamoDbTables",
           "type": {
@@ -4639,7 +4639,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 727
+            "line": 778
           },
           "name": "cfnDataSources",
           "type": {
@@ -4660,7 +4660,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 722
+            "line": 773
           },
           "name": "cfnFunctionConfigurations",
           "type": {
@@ -4681,7 +4681,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 747
+            "line": 798
           },
           "name": "cfnFunctions",
           "type": {
@@ -4702,7 +4702,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 702
+            "line": 753
           },
           "name": "cfnGraphqlApi",
           "type": {
@@ -4718,7 +4718,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 707
+            "line": 758
           },
           "name": "cfnGraphqlSchema",
           "type": {
@@ -4734,7 +4734,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 717
+            "line": 768
           },
           "name": "cfnResolvers",
           "type": {
@@ -4755,7 +4755,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 742
+            "line": 793
           },
           "name": "cfnRoles",
           "type": {
@@ -4776,7 +4776,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 732
+            "line": 783
           },
           "name": "cfnTables",
           "type": {
@@ -4797,7 +4797,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 712
+            "line": 763
           },
           "name": "cfnApiKey",
           "optional": true,
@@ -4820,7 +4820,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 615
+        "line": 666
       },
       "name": "AmplifyGraphqlApiProps",
       "properties": [
@@ -4834,7 +4834,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 632
+            "line": 683
           },
           "name": "authorizationModes",
           "type": {
@@ -4851,7 +4851,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 620
+            "line": 671
           },
           "name": "definition",
           "type": {
@@ -4868,7 +4868,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 626
+            "line": 677
           },
           "name": "apiName",
           "optional": true,
@@ -4887,7 +4887,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 647
+            "line": 698
           },
           "name": "conflictResolution",
           "optional": true,
@@ -4905,7 +4905,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 691
+            "line": 742
           },
           "name": "dataStoreConfiguration",
           "optional": true,
@@ -4925,7 +4925,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 640
+            "line": 691
           },
           "name": "functionNameMap",
           "optional": true,
@@ -4948,7 +4948,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 662
+            "line": 713
           },
           "name": "functionSlots",
           "optional": true,
@@ -4983,7 +4983,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 685
+            "line": 736
           },
           "name": "outputStorageStrategy",
           "optional": true,
@@ -5000,7 +5000,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 674
+            "line": 725
           },
           "name": "predictionsBucket",
           "optional": true,
@@ -5018,7 +5018,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 656
+            "line": 707
           },
           "name": "stackMappings",
           "optional": true,
@@ -5044,7 +5044,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 669
+            "line": 720
           },
           "name": "transformerPlugins",
           "optional": true,
@@ -5066,7 +5066,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 680
+            "line": 731
           },
           "name": "translationBehavior",
           "optional": true,
@@ -5089,7 +5089,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 759
+        "line": 810
       },
       "name": "AmplifyGraphqlApiResources",
       "properties": [
@@ -5102,7 +5102,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 783
+            "line": 834
           },
           "name": "cfnResources",
           "type": {
@@ -5118,7 +5118,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 778
+            "line": 829
           },
           "name": "functions",
           "type": {
@@ -5139,7 +5139,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 763
+            "line": 814
           },
           "name": "graphqlApi",
           "type": {
@@ -5155,7 +5155,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 788
+            "line": 839
           },
           "name": "nestedStacks",
           "type": {
@@ -5176,7 +5176,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 773
+            "line": 824
           },
           "name": "roles",
           "type": {
@@ -5197,7 +5197,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 768
+            "line": 819
           },
           "name": "tables",
           "type": {
@@ -5427,7 +5427,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 98
+        "line": 141
       },
       "name": "ApiKeyAuthorizationConfig",
       "properties": [
@@ -5440,7 +5440,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 107
+            "line": 150
           },
           "name": "expires",
           "type": {
@@ -5456,7 +5456,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 102
+            "line": 145
           },
           "name": "description",
           "optional": true,
@@ -5479,7 +5479,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 130
+        "line": 173
       },
       "name": "AuthorizationModes",
       "properties": [
@@ -5493,7 +5493,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 170
+            "line": 221
           },
           "name": "adminRoles",
           "optional": true,
@@ -5516,7 +5516,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 158
+            "line": 209
           },
           "name": "apiKeyConfig",
           "optional": true,
@@ -5533,7 +5533,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 134
+            "line": 177
           },
           "name": "defaultAuthorizationMode",
           "optional": true,
@@ -5544,14 +5544,14 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Applies to 'public' and 'private' auth strategies.",
+            "remarks": "This applies to any IAM principal except Amazon Cognito identity pool's authenticated and unauthenticated roles.\nThis behavior was has recently been improved.\nSee https://docs.amplify.aws/cli/react/tools/cli/migration/iam-auth-updates-for-cdk-construct for details.",
             "stability": "stable",
-            "summary": "IAM Auth config, required if an 'iam' auth provider is specified in the Api."
+            "summary": "IAM Auth config, required to allow IAM-based access to this API."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 140
+            "line": 185
           },
           "name": "iamConfig",
           "optional": true,
@@ -5559,6 +5559,24 @@
             "fqn": "@aws-amplify/graphql-api-construct.IAMAuthorizationConfig"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Applies to 'public' and 'private' auth strategies.",
+            "stability": "stable",
+            "summary": "Cognito Identity Pool config, required if an 'identityPool' auth provider is specified in the Api."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/types.ts",
+            "line": 191
+          },
+          "name": "identityPoolConfig",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-amplify/graphql-api-construct.IdentityPoolAuthorizationConfig"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -5569,7 +5587,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 164
+            "line": 215
           },
           "name": "lambdaConfig",
           "optional": true,
@@ -5587,7 +5605,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 152
+            "line": 203
           },
           "name": "oidcConfig",
           "optional": true,
@@ -5605,7 +5623,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 146
+            "line": 197
           },
           "name": "userPoolConfig",
           "optional": true,
@@ -5630,7 +5648,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 191
+        "line": 242
       },
       "name": "AutomergeConflictResolutionStrategy",
       "properties": [
@@ -5644,7 +5662,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 196
+            "line": 247
           },
           "name": "handlerType",
           "type": {
@@ -5669,7 +5687,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 239
+        "line": 290
       },
       "name": "ConflictResolution",
       "symbolId": "src/types:ConflictResolution"
@@ -5685,7 +5703,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 181
+        "line": 232
       },
       "name": "ConflictResolutionStrategyBase",
       "properties": [
@@ -5698,7 +5716,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 185
+            "line": 236
           },
           "name": "detectionType",
           "type": {
@@ -5722,7 +5740,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 213
+        "line": 264
       },
       "name": "CustomConflictResolutionStrategy",
       "properties": [
@@ -5735,7 +5753,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 224
+            "line": 275
           },
           "name": "conflictHandler",
           "type": {
@@ -5752,7 +5770,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 219
+            "line": 270
           },
           "name": "handlerType",
           "type": {
@@ -5840,7 +5858,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 244
+        "line": 295
       },
       "name": "DataStoreConfiguration",
       "properties": [
@@ -5853,7 +5871,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 253
+            "line": 304
           },
           "name": "models",
           "optional": true,
@@ -5888,7 +5906,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 248
+            "line": 299
           },
           "name": "project",
           "optional": true,
@@ -5970,7 +5988,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 275
+        "line": 326
       },
       "name": "FunctionSlotBase",
       "properties": [
@@ -5983,7 +6001,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 279
+            "line": 330
           },
           "name": "fieldName",
           "type": {
@@ -5999,7 +6017,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 290
+            "line": 341
           },
           "name": "function",
           "type": {
@@ -6016,7 +6034,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 285
+            "line": 336
           },
           "name": "slotIndex",
           "type": {
@@ -6038,7 +6056,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 260
+        "line": 311
       },
       "name": "FunctionSlotOverride",
       "properties": [
@@ -6052,7 +6070,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 264
+            "line": 315
           },
           "name": "requestMappingTemplate",
           "optional": true,
@@ -6070,7 +6088,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 269
+            "line": 320
           },
           "name": "responseMappingTemplate",
           "optional": true,
@@ -6099,15 +6117,50 @@
         {
           "abstract": true,
           "docs": {
-            "stability": "stable",
+            "deprecated": "Use 'enableIamAuthorizationMode' and IAM Policy to control access for IAM principals.\nSee https://docs.amplify.aws/cli/react/tools/cli/migration/iam-auth-updates-for-cdk-construct for details.",
+            "remarks": "If an IRole is provided, the role `name` will be used for matching.\nIf a string is provided, the raw value will be used for matching.",
+            "stability": "deprecated",
+            "summary": "A list of IAM roles which will be granted full read/write access to the generated model if IAM auth is enabled."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/types.ts",
+            "line": 61
+          },
+          "name": "allowListedRoles",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "aws-cdk-lib.aws_iam.IRole"
+                    }
+                  ]
+                }
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "deprecated": "Use 'IdentityPoolAuthorizationConfig.authenticatedUserRole' instead.\nSee https://docs.amplify.aws/cli/react/tools/cli/migration/iam-auth-updates-for-cdk-construct for details.",
+            "stability": "deprecated",
             "summary": "Authenticated user role, applies to { provider: iam, allow: private } access."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 37
+            "line": 43
           },
           "name": "authenticatedUserRole",
+          "optional": true,
           "type": {
             "fqn": "aws-cdk-lib.aws_iam.IRole"
           }
@@ -6115,66 +6168,59 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Format: `<region>:<id string>`",
+            "custom": {
+              "auth": "directive rules are not applied.\nInstead, access should be defined by IAM Policy, see https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsappsync.html.\n\nDoes not apply to authenticated and unauthenticated IAM Roles attached to Cognito Identity Pool.\nUse IdentityPoolAuthorizationConfig to configure their access."
+            },
+            "remarks": "If enabled",
             "stability": "stable",
-            "summary": "ID for the Cognito Identity Pool vending auth and unauth roles."
+            "summary": "Enables access for IAM principals."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 32
+            "line": 70
           },
-          "name": "identityPoolId",
+          "name": "enableIamAuthorizationMode",
+          "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "stability": "stable",
-            "summary": "Unauthenticated user role, applies to { provider: iam, allow: public } access."
+            "deprecated": "Use 'IdentityPoolAuthorizationConfig.identityPoolId' instead.\nSee https://docs.amplify.aws/cli/react/tools/cli/migration/iam-auth-updates-for-cdk-construct for details.",
+            "remarks": "Format: `<region>:<id string>`",
+            "stability": "deprecated",
+            "summary": "ID for the Cognito Identity Pool vending auth and unauth roles."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 42
+            "line": 35
           },
-          "name": "unauthenticatedUserRole",
+          "name": "identityPoolId",
+          "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_iam.IRole"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "If an IRole is provided, the role `name` will be used for matching.\nIf a string is provided, the raw value will be used for matching.",
-            "stability": "stable",
-            "summary": "A list of IAM roles which will be granted full read/write access to the generated model if IAM auth is enabled."
+            "deprecated": "Use 'IdentityPoolAuthorizationConfig.unauthenticatedUserRole' instead.\nSee https://docs.amplify.aws/cli/react/tools/cli/migration/iam-auth-updates-for-cdk-construct for details.",
+            "stability": "deprecated",
+            "summary": "Unauthenticated user role, applies to { provider: iam, allow: public } access."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 49
+            "line": 51
           },
-          "name": "allowListedRoles",
+          "name": "unauthenticatedUserRole",
           "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "union": {
-                  "types": [
-                    {
-                      "primitive": "string"
-                    },
-                    {
-                      "fqn": "aws-cdk-lib.aws_iam.IRole"
-                    }
-                  ]
-                }
-              },
-              "kind": "array"
-            }
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
           }
         }
       ],
@@ -6190,7 +6236,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 549
+        "line": 600
       },
       "name": "IAmplifyGraphqlDefinition",
       "properties": [
@@ -6205,7 +6251,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 574
+            "line": 625
           },
           "name": "dataSourceStrategies",
           "type": {
@@ -6239,7 +6285,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 560
+            "line": 611
           },
           "name": "functionSlots",
           "type": {
@@ -6273,7 +6319,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 554
+            "line": 605
           },
           "name": "schema",
           "type": {
@@ -6290,7 +6336,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 580
+            "line": 631
           },
           "name": "customSqlDataSourceStrategies",
           "optional": true,
@@ -6314,7 +6360,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 568
+            "line": 619
           },
           "name": "referencedLambdaFunctions",
           "optional": true,
@@ -6340,7 +6386,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 586
+        "line": 637
       },
       "name": "IBackendOutputEntry",
       "properties": [
@@ -6353,7 +6399,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 595
+            "line": 646
           },
           "name": "payload",
           "type": {
@@ -6374,7 +6420,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 590
+            "line": 641
           },
           "name": "version",
           "type": {
@@ -6394,7 +6440,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 601
+        "line": 652
       },
       "methods": [
         {
@@ -6405,7 +6451,7 @@
           },
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 608
+            "line": 659
           },
           "name": "addBackendOutputEntry",
           "parameters": [
@@ -6433,6 +6479,73 @@
       "name": "IBackendOutputStorageStrategy",
       "symbolId": "src/types:IBackendOutputStorageStrategy"
     },
+    "@aws-amplify/graphql-api-construct.IdentityPoolAuthorizationConfig": {
+      "assembly": "@aws-amplify/graphql-api-construct",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Configuration for Cognito Identity Pool Authorization on the Graphql Api."
+      },
+      "fqn": "@aws-amplify/graphql-api-construct.IdentityPoolAuthorizationConfig",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/types.ts",
+        "line": 77
+      },
+      "name": "IdentityPoolAuthorizationConfig",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Authenticated user role, applies to { provider: iam, allow: private } access."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/types.ts",
+            "line": 87
+          },
+          "name": "authenticatedUserRole",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Format: `<region>:<id string>`",
+            "stability": "stable",
+            "summary": "ID for the Cognito Identity Pool vending auth and unauth roles."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/types.ts",
+            "line": 82
+          },
+          "name": "identityPoolId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Unauthenticated user role, applies to { provider: iam, allow: public } access."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/types.ts",
+            "line": 92
+          },
+          "name": "unauthenticatedUserRole",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        }
+      ],
+      "symbolId": "src/types:IdentityPoolAuthorizationConfig"
+    },
     "@aws-amplify/graphql-api-construct.LambdaAuthorizationConfig": {
       "assembly": "@aws-amplify/graphql-api-construct",
       "datatype": true,
@@ -6444,7 +6557,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 113
+        "line": 156
       },
       "name": "LambdaAuthorizationConfig",
       "properties": [
@@ -6457,7 +6570,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 117
+            "line": 160
           },
           "name": "function",
           "type": {
@@ -6473,7 +6586,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 122
+            "line": 165
           },
           "name": "ttl",
           "type": {
@@ -6497,7 +6610,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 296
+        "line": 347
       },
       "name": "MutationFunctionSlot",
       "properties": [
@@ -6511,7 +6624,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 306
+            "line": 357
           },
           "name": "slotName",
           "type": {
@@ -6527,7 +6640,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 300
+            "line": 351
           },
           "name": "typeName",
           "type": {
@@ -6548,7 +6661,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 65
+        "line": 108
       },
       "name": "OIDCAuthorizationConfig",
       "properties": [
@@ -6561,7 +6674,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 74
+            "line": 117
           },
           "name": "oidcIssuerUrl",
           "type": {
@@ -6577,7 +6690,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 69
+            "line": 112
           },
           "name": "oidcProviderName",
           "type": {
@@ -6594,7 +6707,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 86
+            "line": 129
           },
           "name": "tokenExpiryFromAuth",
           "type": {
@@ -6611,7 +6724,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 92
+            "line": 135
           },
           "name": "tokenExpiryFromIssue",
           "type": {
@@ -6628,7 +6741,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 80
+            "line": 123
           },
           "name": "clientId",
           "optional": true,
@@ -6653,7 +6766,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 202
+        "line": 253
       },
       "name": "OptimisticConflictResolutionStrategy",
       "properties": [
@@ -6667,7 +6780,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 207
+            "line": 258
           },
           "name": "handlerType",
           "type": {
@@ -6688,7 +6801,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 447
+        "line": 498
       },
       "name": "PartialTranslationBehavior",
       "properties": [
@@ -6703,7 +6816,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 533
+            "line": 584
           },
           "name": "allowDestructiveGraphqlSchemaUpdates",
           "optional": true,
@@ -6721,7 +6834,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 459
+            "line": 510
           },
           "name": "disableResolverDeduping",
           "optional": true,
@@ -6743,7 +6856,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 498
+            "line": 549
           },
           "name": "enableAutoIndexQueryNames",
           "optional": true,
@@ -6762,7 +6875,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 513
+            "line": 564
           },
           "name": "enableSearchNodeToNodeEncryption",
           "optional": true,
@@ -6780,7 +6893,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 519
+            "line": 570
           },
           "name": "enableTransformerCfnOutputs",
           "optional": true,
@@ -6798,7 +6911,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 478
+            "line": 529
           },
           "name": "populateOwnerFieldForStaticGroupAuth",
           "optional": true,
@@ -6817,7 +6930,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 543
+            "line": 594
           },
           "name": "replaceTableUponGsiUpdate",
           "optional": true,
@@ -6835,7 +6948,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 504
+            "line": 555
           },
           "name": "respectPrimaryKeyAttributesOnConnectionField",
           "optional": true,
@@ -6853,7 +6966,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 465
+            "line": 516
           },
           "name": "sandboxModeEnabled",
           "optional": true,
@@ -6874,7 +6987,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 491
+            "line": 542
           },
           "name": "secondaryKeyAsGSI",
           "optional": true,
@@ -6895,7 +7008,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 452
+            "line": 503
           },
           "name": "shouldDeepMergeDirectiveConfigDefaults",
           "optional": true,
@@ -6914,7 +7027,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 485
+            "line": 536
           },
           "name": "suppressApiKeyGeneration",
           "optional": true,
@@ -6932,7 +7045,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 472
+            "line": 523
           },
           "name": "useSubUsernameForDefaultIdentityClaim",
           "optional": true,
@@ -7042,7 +7155,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 312
+        "line": 363
       },
       "name": "QueryFunctionSlot",
       "properties": [
@@ -7056,7 +7169,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 322
+            "line": 373
           },
           "name": "slotName",
           "type": {
@@ -7072,7 +7185,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 316
+            "line": 367
           },
           "name": "typeName",
           "type": {
@@ -7566,7 +7679,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 328
+        "line": 379
       },
       "name": "SubscriptionFunctionSlot",
       "properties": [
@@ -7580,7 +7693,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 338
+            "line": 389
           },
           "name": "slotName",
           "type": {
@@ -7596,7 +7709,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 332
+            "line": 383
           },
           "name": "typeName",
           "type": {
@@ -7669,7 +7782,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 352
+        "line": 403
       },
       "name": "TranslationBehavior",
       "properties": [
@@ -7684,7 +7797,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 431
+            "line": 482
           },
           "name": "allowDestructiveGraphqlSchemaUpdates",
           "type": {
@@ -7701,7 +7814,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 364
+            "line": 415
           },
           "name": "disableResolverDeduping",
           "type": {
@@ -7722,7 +7835,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 403
+            "line": 454
           },
           "name": "enableAutoIndexQueryNames",
           "type": {
@@ -7737,7 +7850,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 411
+            "line": 462
           },
           "name": "enableSearchNodeToNodeEncryption",
           "type": {
@@ -7754,7 +7867,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 417
+            "line": 468
           },
           "name": "enableTransformerCfnOutputs",
           "type": {
@@ -7771,7 +7884,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 383
+            "line": 434
           },
           "name": "populateOwnerFieldForStaticGroupAuth",
           "type": {
@@ -7789,7 +7902,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 441
+            "line": 492
           },
           "name": "replaceTableUponGsiUpdate",
           "type": {
@@ -7806,7 +7919,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 409
+            "line": 460
           },
           "name": "respectPrimaryKeyAttributesOnConnectionField",
           "type": {
@@ -7823,7 +7936,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 370
+            "line": 421
           },
           "name": "sandboxModeEnabled",
           "type": {
@@ -7843,7 +7956,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 396
+            "line": 447
           },
           "name": "secondaryKeyAsGSI",
           "type": {
@@ -7863,7 +7976,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 357
+            "line": 408
           },
           "name": "shouldDeepMergeDirectiveConfigDefaults",
           "type": {
@@ -7881,7 +7994,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 390
+            "line": 441
           },
           "name": "suppressApiKeyGeneration",
           "type": {
@@ -7898,7 +8011,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 377
+            "line": 428
           },
           "name": "useSubUsernameForDefaultIdentityClaim",
           "type": {
@@ -7919,7 +8032,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/types.ts",
-        "line": 55
+        "line": 98
       },
       "name": "UserPoolAuthorizationConfig",
       "properties": [
@@ -7932,7 +8045,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/types.ts",
-            "line": 59
+            "line": 102
           },
           "name": "userPool",
           "type": {
@@ -8020,6 +8133,6 @@
       "symbolId": "src/model-datasource-strategy-types:VpcConfig"
     }
   },
-  "version": "1.6.0",
-  "fingerprint": "u5snO8ZPHMiLPk5jyhc3cmp3VfXmaoo01VrGRkW5fwg="
+  "version": "1.7.0-iam-auth-with-identityPool-provider-1.0",
+  "fingerprint": "QhpqC29/N63/S8VdlNTHvgr6phB+mbGL/VThCRmfs44="
 }