Resource: awsAppsyncGraphqlApi

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  authenticationType: "API_KEY",
  name: "example",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  authenticationType: "AWS_IAM",
  name: "example",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  authenticationType: "AMAZON_COGNITO_USER_POOLS",
  name: "example",
  userPoolConfig: {
    awsRegion: "${data.aws_region.current.name}",
    defaultAction: "DENY",
    userPoolId: "${aws_cognito_user_pool.example.id}",
  },
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  authenticationType: "OPENID_CONNECT",
  name: "example",
  openidConnectConfig: {
    issuer: "https://example.com",
  },
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsAppsyncGraphqlApiExample = new aws.appsyncGraphqlApi.AppsyncGraphqlApi(
  this,
  "example",
  {
    authenticationType: "AWS_LAMBDA",
    lambdaAuthorizerConfig: {
      authorizerUri:
        "arn:aws:lambda:us-east-1:123456789012:function:custom_lambda_authorizer",
    },
    name: "example",
  }
);
new aws.lambdaPermission.LambdaPermission(this, "appsync_lambda_authorizer", {
  action: "lambda:InvokeFunction",
  functionName: "custom_lambda_authorizer",
  principal: "appsync.amazonaws.com",
  sourceArn: awsAppsyncGraphqlApiExample.arn,
  statementId: "appsync_lambda_authorizer",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  additionalAuthenticationProvider: [
    {
      authenticationType: "AWS_IAM",
    },
  ],
  authenticationType: "API_KEY",
  name: "example",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.appsyncGraphqlApi.AppsyncGraphqlApi(this, "example", {
  authenticationType: "AWS_IAM",
  name: "example",
  schema: "schema {\n\tquery: Query\n}\ntype Query {\n  test: Int\n}\n",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const dataAwsIamPolicyDocumentAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["appsync.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const awsIamRoleExample = new aws.iamRole.IamRole(this, "example", {
  assumeRolePolicy: dataAwsIamPolicyDocumentAssumeRole.json,
  name: "example",
});
const awsIamRolePolicyAttachmentExample =
  new aws.iamRolePolicyAttachment.IamRolePolicyAttachment(this, "example_2", {
    policyArn:
      "arn:aws:iam::aws:policy/service-role/AWSAppSyncPushToCloudWatchLogs",
    role: awsIamRoleExample.name,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyAttachmentExample.overrideLogicalId("example");
const awsAppsyncGraphqlApiExample = new aws.appsyncGraphqlApi.AppsyncGraphqlApi(
  this,
  "example_3",
  {
    logConfig: {
      cloudwatchLogsRoleArn: awsIamRoleExample.arn,
      fieldLogLevel: "ERROR",
    },
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsAppsyncGraphqlApiExample.overrideLogicalId("example");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsAppsyncGraphqlApiExample = new aws.appsyncGraphqlApi.AppsyncGraphqlApi(
  this,
  "example",
  {
    authenticationType: "API_KEY",
    name: "example",
  }
);
const awsWafv2WebAclExample = new aws.wafv2WebAcl.Wafv2WebAcl(
  this,
  "example_1",
  {
    defaultAction: {
      allow: {},
    },
    description: "Example of a managed rule.",
    name: "managed-rule-example",
    rule: [
      {
        name: "rule-1",
        overrideAction: {
          block: [{}],
        },
        priority: 1,
        statement: {
          managedRuleGroupStatement: {
            name: "AWSManagedRulesCommonRuleSet",
            vendorName: "AWS",
          },
        },
        visibilityConfig: {
          cloudwatchMetricsEnabled: false,
          metricName: "friendly-rule-metric-name",
          sampledRequestsEnabled: false,
        },
      },
    ],
    scope: "REGIONAL",
    visibilityConfig: {
      cloudwatchMetricsEnabled: false,
      metricName: "friendly-metric-name",
      sampledRequestsEnabled: false,
    },
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsWafv2WebAclExample.overrideLogicalId("example");
const awsWafv2WebAclAssociationExample =
  new aws.wafv2WebAclAssociation.Wafv2WebAclAssociation(this, "example_2", {
    resourceArn: awsAppsyncGraphqlApiExample.arn,
    webAclArn: awsWafv2WebAclExample.arn,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsWafv2WebAclAssociationExample.overrideLogicalId("example");

$ terraform import aws_appsync_graphql_api.example 0123456789