@pulumi/aws 4.31.0 → 4.33.0

package/acm/getCertificate.d.ts

@@ -38,7 +38,7 @@ export interface GetCertificateArgs {
      */
     domain: string;
     /**
-     * A list of key algorithms to filter certificates. By default, ACM does not return all certificate types when searching. Valid values are `RSA_1024`, `RSA_2048`, `RSA_4096`, `EC_prime256v1`, `EC_secp384r1`, and `EC_secp521r1`.
+     * A list of key algorithms to filter certificates. By default, ACM does not return all certificate types when searching. See the [ACM API Reference](https://docs.aws.amazon.com/acm/latest/APIReference/API_CertificateDetail.html#ACM-Type-CertificateDetail-KeyAlgorithm) for supported key algorithms.
      */
     keyTypes?: string[];
     /**
@@ -100,7 +100,7 @@ export interface GetCertificateOutputArgs {
      */
     domain: pulumi.Input<string>;
     /**
-     * A list of key algorithms to filter certificates. By default, ACM does not return all certificate types when searching. Valid values are `RSA_1024`, `RSA_2048`, `RSA_4096`, `EC_prime256v1`, `EC_secp384r1`, and `EC_secp521r1`.
+     * A list of key algorithms to filter certificates. By default, ACM does not return all certificate types when searching. See the [ACM API Reference](https://docs.aws.amazon.com/acm/latest/APIReference/API_CertificateDetail.html#ACM-Type-CertificateDetail-KeyAlgorithm) for supported key algorithms.
      */
     keyTypes?: pulumi.Input<pulumi.Input<string>[]>;
     /**

package/alb/loadBalancer.d.ts

@@ -17,7 +17,7 @@ import { IpAddressType, LoadBalancerType } from "./index";
  *     internal: false,
  *     loadBalancerType: "application",
  *     securityGroups: [aws_security_group.lb_sg.id],
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     accessLogs: {
  *         bucket: aws_s3_bucket.lb_logs.bucket,
@@ -38,7 +38,7 @@ import { IpAddressType, LoadBalancerType } from "./index";
  * const test = new aws.lb.LoadBalancer("test", {
  *     internal: false,
  *     loadBalancerType: "network",
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     tags: {
  *         Environment: "production",

package/alb/loadBalancer.js

@@ -21,7 +21,7 @@ const utilities = require("../utilities");
  *     internal: false,
  *     loadBalancerType: "application",
  *     securityGroups: [aws_security_group.lb_sg.id],
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     accessLogs: {
  *         bucket: aws_s3_bucket.lb_logs.bucket,
@@ -42,7 +42,7 @@ const utilities = require("../utilities");
  * const test = new aws.lb.LoadBalancer("test", {
  *     internal: false,
  *     loadBalancerType: "network",
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     tags: {
  *         Environment: "production",

package/alb/targetGroup.d.ts

@@ -97,7 +97,7 @@ export declare class TargetGroup extends pulumi.CustomResource {
      */
     readonly loadBalancingAlgorithmType: pulumi.Output<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -194,7 +194,7 @@ export interface TargetGroupState {
      */
     loadBalancingAlgorithmType?: pulumi.Input<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     name?: pulumi.Input<string>;
     /**
@@ -275,7 +275,7 @@ export interface TargetGroupArgs {
      */
     loadBalancingAlgorithmType?: pulumi.Input<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     name?: pulumi.Input<string>;
     /**

package/appconfig/application.d.ts

@@ -53,13 +53,13 @@ export declare class Application extends pulumi.CustomResource {
      */
     readonly name: pulumi.Output<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -90,13 +90,13 @@ export interface ApplicationState {
      */
     name?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -115,7 +115,7 @@ export interface ApplicationArgs {
      */
     name?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/appconfig/configurationProfile.d.ts

@@ -76,13 +76,13 @@ export declare class ConfigurationProfile extends pulumi.CustomResource {
      */
     readonly retrievalRoleArn: pulumi.Output<string | undefined>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -133,13 +133,13 @@ export interface ConfigurationProfileState {
      */
     retrievalRoleArn?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -174,7 +174,7 @@ export interface ConfigurationProfileArgs {
      */
     retrievalRoleArn?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/appconfig/deployment.d.ts

@@ -82,13 +82,13 @@ export declare class Deployment extends pulumi.CustomResource {
      */
     readonly state: pulumi.Output<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -143,13 +143,13 @@ export interface DeploymentState {
      */
     state?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -184,7 +184,7 @@ export interface DeploymentArgs {
      */
     environmentId: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/appconfig/deploymentStrategy.d.ts

@@ -78,13 +78,13 @@ export declare class DeploymentStrategy extends pulumi.CustomResource {
      */
     readonly replicateTo: pulumi.Output<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -135,13 +135,13 @@ export interface DeploymentStrategyState {
      */
     replicateTo?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -180,7 +180,7 @@ export interface DeploymentStrategyArgs {
      */
     replicateTo: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/appconfig/environment.d.ts

@@ -78,13 +78,13 @@ export declare class Environment extends pulumi.CustomResource {
     readonly name: pulumi.Output<string>;
     readonly state: pulumi.Output<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -128,13 +128,13 @@ export interface EnvironmentState {
     name?: pulumi.Input<string>;
     state?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -161,7 +161,7 @@ export interface EnvironmentArgs {
      */
     name?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the resource. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/applicationloadbalancing/loadBalancer.d.ts

@@ -17,7 +17,7 @@ import { IpAddressType, LoadBalancerType } from "../alb";
  *     internal: false,
  *     loadBalancerType: "application",
  *     securityGroups: [aws_security_group.lb_sg.id],
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     accessLogs: {
  *         bucket: aws_s3_bucket.lb_logs.bucket,
@@ -38,7 +38,7 @@ import { IpAddressType, LoadBalancerType } from "../alb";
  * const test = new aws.lb.LoadBalancer("test", {
  *     internal: false,
  *     loadBalancerType: "network",
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     tags: {
  *         Environment: "production",

package/applicationloadbalancing/loadBalancer.js

@@ -21,7 +21,7 @@ const utilities = require("../utilities");
  *     internal: false,
  *     loadBalancerType: "application",
  *     securityGroups: [aws_security_group.lb_sg.id],
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     accessLogs: {
  *         bucket: aws_s3_bucket.lb_logs.bucket,
@@ -42,7 +42,7 @@ const utilities = require("../utilities");
  * const test = new aws.lb.LoadBalancer("test", {
  *     internal: false,
  *     loadBalancerType: "network",
- *     subnets: aws_subnet["public"].map(__item => __item.id),
+ *     subnets: .map(subnet => subnet.id),
  *     enableDeletionProtection: true,
  *     tags: {
  *         Environment: "production",

package/applicationloadbalancing/targetGroup.d.ts

@@ -99,7 +99,7 @@ export declare class TargetGroup extends pulumi.CustomResource {
      */
     readonly loadBalancingAlgorithmType: pulumi.Output<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -197,7 +197,7 @@ export interface TargetGroupState {
      */
     loadBalancingAlgorithmType?: pulumi.Input<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     name?: pulumi.Input<string>;
     /**
@@ -278,7 +278,7 @@ export interface TargetGroupArgs {
      */
     loadBalancingAlgorithmType?: pulumi.Input<string>;
     /**
-     * Name of the Target Group.
+     * Name of the target group. If omitted, this provider will assign a random, unique name.
      */
     name?: pulumi.Input<string>;
     /**

package/appstream/fleet.d.ts

@@ -17,7 +17,7 @@ import { input as inputs, output as outputs } from "../types";
  *     displayName: "test-fleet",
  *     enableDefaultInternetAccess: false,
  *     fleetType: "ON_DEMAND",
- *     idleDisconnectTimeoutInSeconds: 15,
+ *     idleDisconnectTimeoutInSeconds: 60,
  *     imageName: "Amazon-AppStream2-Sample-Image-02-04-2019",
  *     instanceType: "stream.standard.large",
  *     maxUserDurationInSeconds: 600,

package/appstream/fleet.js

@@ -22,7 +22,7 @@ const utilities = require("../utilities");
  *     displayName: "test-fleet",
  *     enableDefaultInternetAccess: false,
  *     fleetType: "ON_DEMAND",
- *     idleDisconnectTimeoutInSeconds: 15,
+ *     idleDisconnectTimeoutInSeconds: 60,
  *     imageName: "Amazon-AppStream2-Sample-Image-02-04-2019",
  *     instanceType: "stream.standard.large",
  *     maxUserDurationInSeconds: 600,

package/appstream/imageBuilder.d.ts

@@ -105,13 +105,13 @@ export declare class ImageBuilder extends pulumi.CustomResource {
      */
     readonly state: pulumi.Output<string>;
     /**
-     * A map of tags to assign to the instance. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the instance. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     readonly tagsAll: pulumi.Output<{
         [key: string]: string;
@@ -190,13 +190,13 @@ export interface ImageBuilderState {
      */
     state?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the instance. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the instance. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * A map of tags assigned to the resource, including those inherited from the provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block).
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
      */
     tagsAll?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -255,7 +255,7 @@ export interface ImageBuilderArgs {
      */
     name?: pulumi.Input<string>;
     /**
-     * A map of tags to assign to the instance. If configured with a provider [`defaultTags` configuration block](https://www.terraform.io/docs/providers/aws/index.html#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.
+     * A map of tags to assign to the instance. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
      */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/appsync/graphQLApi.d.ts

@@ -14,6 +14,16 @@ import { input as inputs, output as outputs } from "../types";
  *     authenticationType: "API_KEY",
  * });
  * ```
+ * ### AWS IAM Authentication
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.appsync.GraphQLApi("example", {
+ *     authenticationType: "AWS_IAM",
+ * });
+ * ```
  * ### AWS Cognito User Pool Authentication
  *
  * ```typescript
@@ -29,57 +39,66 @@ import { input as inputs, output as outputs } from "../types";
  *     },
  * });
  * ```
- * ### AWS IAM Authentication
+ * ### OpenID Connect Authentication
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.appsync.GraphQLApi("example", {
- *     authenticationType: "AWS_IAM",
+ *     authenticationType: "OPENID_CONNECT",
+ *     openidConnectConfig: {
+ *         issuer: "https://example.com",
+ *     },
  * });
  * ```
- * ### With Schema
+ * ### AWS Lambda Authorizer Authentication
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.appsync.GraphQLApi("example", {
- *     authenticationType: "AWS_IAM",
- *     schema: `schema {
- * 	query: Query
- * }
- * type Query {
- *   test: Int
- * }
- * `,
+ *     authenticationType: "AWS_LAMBDA",
+ *     lambdaAuthorizerConfig: {
+ *         authorizerUri: "arn:aws:lambda:us-east-1:123456789012:function:custom_lambda_authorizer",
+ *     },
+ * });
+ * const appsyncLambdaAuthorizer = new aws.lambda.Permission("appsyncLambdaAuthorizer", {
+ *     action: "lambda:InvokeFunction",
+ *     "function": "custom_lambda_authorizer",
+ *     principal: "appsync.amazonaws.com",
+ *     sourceArn: example.arn,
  * });
  * ```
- * ### OpenID Connect Authentication
+ * ### With Multiple Authentication Providers
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.appsync.GraphQLApi("example", {
- *     authenticationType: "OPENID_CONNECT",
- *     openidConnectConfig: {
- *         issuer: "https://example.com",
- *     },
+ *     additionalAuthenticationProviders: [{
+ *         authenticationType: "AWS_IAM",
+ *     }],
+ *     authenticationType: "API_KEY",
  * });
  * ```
- * ### With Multiple Authentication Providers
+ * ### With Schema
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.appsync.GraphQLApi("example", {
- *     additionalAuthenticationProviders: [{
- *         authenticationType: "AWS_IAM",
- *     }],
- *     authenticationType: "API_KEY",
+ *     authenticationType: "AWS_IAM",
+ *     schema: `schema {
+ * 	query: Query
+ * }
+ * type Query {
+ *   test: Int
+ * }
+ * `,
  * });
  * ```
  * ### Enabling Logging
@@ -187,9 +206,13 @@ export declare class GraphQLApi extends pulumi.CustomResource {
      */
     readonly arn: pulumi.Output<string>;
     /**
-     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`
+     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`, `AWS_LAMBDA`
      */
     readonly authenticationType: pulumi.Output<string>;
+    /**
+     * Nested argument containing Lambda authorizer configuration. Defined below.
+     */
+    readonly lambdaAuthorizerConfig: pulumi.Output<outputs.appsync.GraphQLApiLambdaAuthorizerConfig | undefined>;
     /**
      * Nested argument containing logging configuration. Defined below.
      */
@@ -254,9 +277,13 @@ export interface GraphQLApiState {
      */
     arn?: pulumi.Input<string>;
     /**
-     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`
+     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`, `AWS_LAMBDA`
      */
     authenticationType?: pulumi.Input<string>;
+    /**
+     * Nested argument containing Lambda authorizer configuration. Defined below.
+     */
+    lambdaAuthorizerConfig?: pulumi.Input<inputs.appsync.GraphQLApiLambdaAuthorizerConfig>;
     /**
      * Nested argument containing logging configuration. Defined below.
      */
@@ -309,9 +336,13 @@ export interface GraphQLApiArgs {
      */
     additionalAuthenticationProviders?: pulumi.Input<pulumi.Input<inputs.appsync.GraphQLApiAdditionalAuthenticationProvider>[]>;
     /**
-     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`
+     * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`, `AWS_LAMBDA`
      */
     authenticationType: pulumi.Input<string>;
+    /**
+     * Nested argument containing Lambda authorizer configuration. Defined below.
+     */
+    lambdaAuthorizerConfig?: pulumi.Input<inputs.appsync.GraphQLApiLambdaAuthorizerConfig>;
     /**
      * Nested argument containing logging configuration. Defined below.
      */