I can’t figure out how to get this working in SST/...
# helps
Sam Hulick
08/19/2021, 5:46 AMI can’t figure out how to get this working in SST/CDK. it works in the Serverless Framework version of my API
Copy code
import { defaultProvider } from '@aws-sdk/credential-provider-node';
import AWSAppSyncClient, { AUTH_TYPE } from 'aws-appsync';
import 'isomorphic-fetch';
const appSyncClient = new AWSAppSyncClient({
url: process.env.GRAPHQL_ENDPOINT_URL,
region: 'us-east-1',
auth: {
type: AUTH_TYPE.AWS_IAM,
credentials: defaultProvider(),
},
disableOffline: true,
});
let client: AWSAppSyncClient<any>;
export default async function getGraphqlClient() {
if (client) return client;
client = await appSyncClient.hydrated();
return client;
}a
Adrián Mouly
08/19/2021, 6:01 AMI can’t make IAM auth to work with API GW v2 😞.
Adrián Mouly
08/19/2021, 6:02 AMIt’s driving me crazy, going to contact AWS support.
s
Sam Hulick
08/19/2021, 1:54 PM@Adrián Mouly I have it working in my other project, which is what’s puzzling.
Sam Hulick
08/19/2021, 1:54 PMI’ll ping if you when I figure it out
Sam Hulick
08/19/2021, 1:59 PMgonna try this:
Copy code
permissions: [
new iam.PolicyStatement({
effect: iam.Effect.ALLOW,
actions: ['appsync:GraphQL'],
resources: [`${appSyncApi.graphqlApi.arn}/*`],
}),
],Sam Hulick
08/19/2021, 2:23 PM@Adrián Mouly oh no.. woops, it was as easy as just doing
permissions: [[appSyncApi.graphqlApi, 'grantMutation']]Sam Hulick
08/19/2021, 2:24 PMon the Lambda func
Sam Hulick
08/19/2021, 2:51 PMso, no more 401 error, but now it hangs when trying to execute a mutation
a
Adrián Mouly
08/19/2021, 2:51 PM🤦♂️
s
Sam Hulick
08/19/2021, 2:53 PMaha! missing dependency
Sam Hulick
08/19/2021, 3:37 PMit works. did you get yours working, Adrián?
a
Adrián Mouly
08/19/2021, 3:47 PMI’m not using AppSync, but also using AWS_IAM.
s
Sam Hulick
08/19/2021, 3:50 PMahh
Sam Hulick
08/19/2021, 3:50 PMoh right, IAM as an authorizer for API Gateway
a
Adrián Mouly
08/19/2021, 3:50 PMYeah.
s
Sam Hulick
08/19/2021, 3:50 PMI’m using Cognito/JWT for my HTTP API, so unfortunately I can’t be of much help 😞
Sam Hulick
08/19/2021, 3:51 PMbut I’d say if you’re paying the $100/mo for AWS tech support, use them 😄
Sam Hulick
08/19/2021, 3:51 PMI bug them all the time via chat
a
Adrián Mouly
08/19/2021, 3:58 PMYeah, I’m going to contact them.
Adrián Mouly
08/19/2021, 3:59 PMThe problem is I have support on one account, not in DEV account.
Adrián Mouly
08/19/2021, 3:59 PMSo I need to deploy my services into the other account, haha.
s
Sam Hulick
08/19/2021, 4:08 PMyeah, they’re picky about that
Sam Hulick
08/19/2021, 4:09 PMI flat out told the last support guy, I’m not paying a support fee for every dev account. they’re JUST dev accounts, it’s not like I’m running a whole business off each one
a
Adrián Mouly
08/19/2021, 4:38 PMYeah.
Adrián Mouly
08/19/2021, 4:38 PMMaybe we are stressing the model using X amount of accounts.
Adrián Mouly
08/19/2021, 4:38 PMAWS should provide support per-business.
s
Sam Hulick
08/19/2021, 4:40 PMI agree. it’s odd they recommend multiple AWS accounts but then make it difficult to get support