This repository has been archived by the owner on Aug 16, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 40
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Add support for appsync apis (#1393)
- Loading branch information
Showing
19 changed files
with
529 additions
and
6 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
18 changes: 18 additions & 0 deletions
18
docs/tables/aws_appsync_graphql_api_additional_authentication_providers.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
|
|
||
| # Table: aws_appsync_graphql_api_additional_authentication_providers | ||
| Describes an additional authentication provider | ||
| ## Columns | ||
| | Name | Type | Description | | ||
| | ------------- | ------------- | ----- | | ||
| |graphql_api_cq_id|uuid|Unique CloudQuery ID of aws_appsync_graphql_apis table (FK)| | ||
| |authentication_type|text|The authentication type: API key, Identity and Access Management (IAM), OpenID Connect (OIDC), Amazon Cognito user pools, or Lambda| | ||
| |lambda_authorizer_config_authorizer_uri|text|The Amazon Resource Name (ARN) of the Lambda function to be called for authorization| | ||
| |lambda_authorizer_config_authorizer_result_ttl_in_seconds|bigint|The number of seconds a response should be cached for| | ||
| |lambda_authorizer_config_identity_validation_expression|text|A regular expression for validation of tokens before the Lambda function is called| | ||
| |open_id_connect_config_issuer|text|The issuer for the OIDC configuration| | ||
| |open_id_connect_config_auth_ttl|bigint|The number of milliseconds that a token is valid after being authenticated| | ||
| |open_id_connect_config_client_id|text|The client identifier of the relying party at the OpenID identity provider| | ||
| |open_id_connect_config_iat_ttl|bigint|The number of milliseconds that a token is valid after it's issued to a user| | ||
| |user_pool_config_aws_region|text|The Amazon Web Services Region in which the user pool was created| | ||
| |user_pool_config_user_pool_id|text|The user pool ID| | ||
| |user_pool_config_app_id_client_regex|text|A regular expression for validating the incoming Amazon Cognito user pool app client ID| |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,30 @@ | ||
|
|
||
| # Table: aws_appsync_graphql_apis | ||
| Describes a GraphQL API | ||
| ## Columns | ||
| | Name | Type | Description | | ||
| | ------------- | ------------- | ----- | | ||
| |account_id|text|The AWS Account ID of the resource.| | ||
| |region|text|The AWS Region of the resource.| | ||
| |id|text|The API ID| | ||
| |arn|text|The Amazon Resource Name (ARN)| | ||
| |authentication_type|text|The authentication type| | ||
| |lambda_authorizer_config_authorizer_uri|text|The Amazon Resource Name (ARN) of the Lambda function to be called for authorization| | ||
| |lambda_authorizer_config_authorizer_result_ttl_in_seconds|bigint|The number of seconds a response should be cached for| | ||
| |lambda_authorizer_config_identity_validation_expression|text|A regular expression for validation of tokens before the Lambda function is called| | ||
| |log_config_cloud_watch_logs_role_arn|text|The service role that AppSync assumes to publish to CloudWatch logs in your account| | ||
| |log_config_field_log_level|text|The field logging level| | ||
| |log_config_exclude_verbose_content|boolean|Set to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level| | ||
| |name|text|The API name| | ||
| |open_id_connect_config_issuer|text|The issuer for the OIDC configuration| | ||
| |open_id_connect_config_auth_ttl|bigint|The number of milliseconds that a token is valid after being authenticated| | ||
| |open_id_connect_config_client_id|text|The client identifier of the relying party at the OpenID identity provider| | ||
| |open_id_connect_config_iat_ttl|bigint|The number of milliseconds that a token is valid after it's issued to a user| | ||
| |tags|jsonb|The tags| | ||
| |uris|jsonb|The URIs| | ||
| |user_pool_config_aws_region|text|The Amazon Web Services Region in which the user pool was created| | ||
| |user_pool_config_default_action|text|The action that you want your GraphQL API to take when a request that uses Amazon Cognito user pool authentication doesn't match the Amazon Cognito user pool configuration| | ||
| |user_pool_config_user_pool_id|text|The user pool ID| | ||
| |user_pool_config_app_id_client_regex|text|A regular expression for validating the incoming Amazon Cognito user pool app client ID| | ||
| |waf_web_acl_arn|text|The ARN of the WAF access control list (ACL) associated with this GraphqlApi, if one exists| | ||
| |xray_enabled|boolean|A flag indicating whether to use X-Ray tracing for this GraphqlApi| |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,45 @@ | ||
| service = "aws" | ||
| output_directory = "." | ||
| add_generate = true | ||
|
|
||
| description_modifier "remove_read_only" { | ||
| words = [" This member is required."] | ||
| } | ||
|
|
||
| resource "aws" "appsync" "graphql_apis" { | ||
| path = "github.com/aws/aws-sdk-go-v2/service/appsync/types.GraphqlApi" | ||
|
|
||
| ignoreError "IgnoreCommonErrors" { | ||
| path = "github.com/cloudquery/cq-provider-aws/client.IgnoreCommonErrors" | ||
| } | ||
| multiplex "AwsAccountRegion" { | ||
| path = "github.com/cloudquery/cq-provider-aws/client.ServiceAccountRegionMultiplexer" | ||
| params = ["appsync"] | ||
| } | ||
| deleteFilter "AccountRegionFilter" { | ||
| path = "github.com/cloudquery/cq-provider-aws/client.DeleteAccountRegionFilter" | ||
| } | ||
|
|
||
| options { | ||
| primary_keys = ["arn"] | ||
| } | ||
|
|
||
| column "api_id" { | ||
| rename = "id" | ||
| } | ||
|
|
||
| userDefinedColumn "account_id" { | ||
| type = "string" | ||
| description = "The AWS Account ID of the resource." | ||
| resolver "resolveAWSAccount" { | ||
| path = "github.com/cloudquery/cq-provider-aws/client.ResolveAWSAccount" | ||
| } | ||
| } | ||
| userDefinedColumn "region" { | ||
| type = "string" | ||
| description = "The AWS Region of the resource." | ||
| resolver "resolveAWSRegion" { | ||
| path = "github.com/cloudquery/cq-provider-aws/client.ResolveAWSRegion" | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.