AWS::AppSync::GraphQLApi AdditionalAuthenticationProvider

Describes an additional authentication provider.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "AuthenticationType" : String,
  "LambdaAuthorizerConfig" : LambdaAuthorizerConfig,
  "OpenIDConnectConfig" : OpenIDConnectConfig,
  "UserPoolConfig" : CognitoUserPoolConfig
}

YAML

  AuthenticationType: String
  LambdaAuthorizerConfig: 
    LambdaAuthorizerConfig
  OpenIDConnectConfig: 
    OpenIDConnectConfig
  UserPoolConfig: 
    CognitoUserPoolConfig

Properties

AuthenticationType

The authentication type for API key, AWS Identity and Access Management, OIDC, Amazon Cognito user pools, or AWS Lambda.

Valid Values: API_KEY | AWS_IAM | OPENID_CONNECT | AMAZON_COGNITO_USER_POOLS | AWS_LAMBDA

Required: Yes

Type: String

Allowed values: API_KEY | AWS_IAM | AMAZON_COGNITO_USER_POOLS | OPENID_CONNECT | AWS_LAMBDA

Update requires: No interruption

LambdaAuthorizerConfig

Configuration for AWS Lambda function authorization.

Required: No

Type: LambdaAuthorizerConfig

Update requires: No interruption

OpenIDConnectConfig

The OIDC configuration.

Required: No

Type: OpenIDConnectConfig

Update requires: No interruption

UserPoolConfig

The Amazon Cognito user pool configuration.

Required: No

Type: CognitoUserPoolConfig

Update requires: No interruption