Set by controls 1

Active controls fix these values.

• log_field_log_levelstring, set to nullField logging level. Valid values: ALL, ERROR, NONE.

Optional 49

• additional_authentication_providerany, default {}One or more additional authentication providers for the GraphqlApi.
• api_keysmap(string), default {}Map of API keys to create
• authentication_typestring, default "API_KEY"The authentication type to use by GraphQL API
• cache_at_rest_encryption_enabledbool, default falseAt-rest encryption flag for cache.
• cache_transit_encryption_enabledbool, default falseTransit encryption flag when connecting to cache.
• cache_ttlnumber, default 1TTL in seconds for cache entries
• cache_typestring, default "SMALL"The cache instance type.
• caching_behaviorstring, default "FULL_REQUEST_CACHING"Caching behavior.
• caching_enabledbool, default falseWhether caching with Elasticache is enabled.
• certificate_arnstring, default ""The Amazon Resource Name (ARN) of the certificate.
• create_graphql_apibool, default trueWhether to create GraphQL API
• create_logs_rolebool, default trueWhether to create service role for Cloudwatch logs
• datasourcesany, default {}Map of datasources to create
• direct_lambda_request_templatestring, default "{ "version" : "2017-02-28", "operation": "Invoke", "payload": { "arguments": $util.toJson($ctx.arguments), "identity": $util.toJson($ctx.identity), "source": $util.toJson($ctx.source), "request": $util.toJson($ctx.request), "prev": $util.toJson($ctx.prev), "info": { "selectionSetList": $util.toJson($ctx.info.selectionSetList), "selectionSetGraphQL": $util.toJson($ctx.info.selectionSetGraphQL), "parentTypeName": $util.toJson($ctx.info.parentTypeName), "fieldName": $util.toJson($ctx.info.fieldName), "variables": $util.toJson($ctx.info.variables) }, "stash": $util.toJson($ctx.stash) } } "VTL request template for the direct lambda integrations
• direct_lambda_response_templatestring, default "$util.toJson($ctx.result) "VTL response template for the direct lambda integrations
• domain_namestring, default ""The domain name that AppSync gets associated with.
• domain_name_association_enabledbool, default falseWhether to enable domain name association on GraphQL API
• domain_name_descriptionstring, default nullA description of the Domain Name.
• dynamodb_allowed_actionslist(string), default [...]List of allowed IAM actions for datasources type AMAZON_DYNAMODB
• elasticsearch_allowed_actionslist(string), default [...]List of allowed IAM actions for datasources type AMAZON_ELASTICSEARCH
• enhanced_metrics_configmap(string), default {}Nested argument containing Lambda Ehanced metrics configuration.
• eventbridge_allowed_actionslist(string), default ["events:PutEvents"]List of allowed IAM actions for datasources type AMAZON_EVENTBRIDGE
• functionsany, default {}Map of functions to create
• graphql_api_tagsmap(string), default {}Map of tags to add to GraphQL API
• iam_permissions_boundarystring, default nullARN for iam permissions boundary
• introspection_configstring, default nullWhether to enable or disable introspection of the GraphQL API.
• lambda_allowed_actionslist(string), default ["lambda:invokeFunction"]List of allowed IAM actions for datasources type AWS_LAMBDA
• lambda_authorizer_configmap(string), default {}Nested argument containing Lambda authorizer configuration.
• log_cloudwatch_logs_role_arnstring, default nullAmazon Resource Name of the service role that AWS AppSync will assume to publish to Amazon CloudWatch logs in your account.
• log_exclude_verbose_contentbool, default falseSet to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level.
• logging_enabledbool, default falseWhether to enable Cloudwatch logging on GraphQL API
• logs_role_descriptionstring, default nullDescription for the IAM role to create for Cloudwatch logs
• logs_role_namestring, default nullName of IAM role to create for Cloudwatch logs
• logs_role_tagsmap(string), default {}Map of tags to add to Cloudwatch logs IAM role
• namestring, default ""Name of GraphQL API
• openid_connect_configmap(string), default {}Nested argument containing OpenID Connect configuration.
• opensearchservice_allowed_actionslist(string), default [...]List of allowed IAM actions for datasources type AMAZON_OPENSEARCH_SERVICE
• query_depth_limitnumber, default nullThe maximum depth a query can have in a single request.
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the region set in the provider configuration
• relational_database_allowed_actionslist(string), default [...]List of allowed IAM actions for datasources type RELATIONAL_DATABASE
• resolver_caching_ttlnumber, default 60Default caching TTL for resolvers when caching is enabled
• resolver_count_limitnumber, default nullThe maximum number of resolvers that can be invoked in a single request.
• resolversany, default {}Map of resolvers to create
• schemastring, default ""The schema definition, in GraphQL schema language format. Terraform cannot perform drift detection of this configuration.
• secrets_manager_allowed_actionslist(string), default [...]List of allowed IAM actions for secrets manager datasources type RELATIONAL_DATABASE
• tagsmap(string), default {}Map of tags to add to all GraphQL resources created by this module
• user_pool_configmap(string), default {}The Amazon Cognito User Pool configuration.
• visibilitystring, default nullThe API visibility. Valid values: GLOBAL, PRIVATE.
• xray_enabledbool, default falseWhether tracing with X-ray is enabled.