Skip to content

Commit 0bfce89

Browse files
robertdrobertd
authored
fix(appsync): fully qualify service principal (#23054)
Builds on top of @jpignata 's PR #23050. Updated integration tests. Closes #23050 Fixes #23035 ---- ### All Submissions: * [x] Have you followed the guidelines in our [Contributing guide?](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) ### Adding new Unconventional Dependencies: * [ ] This PR adds new unconventional dependencies following the process described [here](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md/#adding-new-unconventional-dependencies) ### New Features * [x] Have you added the new feature to an [integration test](https://github.com/aws/aws-cdk/blob/main/INTEGRATION_TESTS.md)? * [x] Did you use `yarn integ` to deploy the infrastructure and generate the snapshot (i.e. `yarn integ` without `--dry-run`)? *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 6f4dcfd commit 0bfce89

25 files changed

+131
-43
lines changed

‎packages/@aws-cdk/aws-appsync/lib/data-source.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,7 @@ export abstract class BaseDataSource extends Construct {
113113
super(scope, id);
114114

115115
if (extended.type !== 'NONE') {
116-
this.serviceRole = props.serviceRole || new Role(this, 'ServiceRole', { assumedBy: new ServicePrincipal('appsync') });
116+
this.serviceRole = props.serviceRole || new Role(this, 'ServiceRole', { assumedBy: new ServicePrincipal('appsync.amazonaws.com') });
117117
}
118118
// Replace unsupported characters from DataSource name. The only allowed pattern is: {[_A-Za-z][_0-9A-Za-z]*}
119119
const name = (props.name ?? id);

‎packages/@aws-cdk/aws-appsync/test/integ.auth-apikey.js.snapshot/aws-appsync-integ.assets.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
{
22
"version": "21.0.0",
33
"files": {
4-
"8af15bf3b17fb15e9d1b558caa4d5484d9b85fd19d3d939c866e805212d8d66a": {
4+
"b0462850439179659920597f4327262b24073af4f4969622163b0a295fce1dda": {
55
"source": {
66
"path": "aws-appsync-integ.template.json",
77
"packaging": "file"
88
},
99
"destinations": {
1010
"current_account-current_region": {
1111
"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
12-
"objectKey": "8af15bf3b17fb15e9d1b558caa4d5484d9b85fd19d3d939c866e805212d8d66a.json",
12+
"objectKey": "b0462850439179659920597f4327262b24073af4f4969622163b0a295fce1dda.json",
1313
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
1414
}
1515
}

‎packages/@aws-cdk/aws-appsync/test/integ.auth-apikey.js.snapshot/aws-appsync-integ.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
"Action": "sts:AssumeRole",
4343
"Effect": "Allow",
4444
"Principal": {
45-
"Service": "appsync"
45+
"Service": "appsync.amazonaws.com"
4646
}
4747
}
4848
],

‎packages/@aws-cdk/aws-appsync/test/integ.auth-apikey.js.snapshot/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"validateOnSynth": false,
1818
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
1919
"cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
20-
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/8af15bf3b17fb15e9d1b558caa4d5484d9b85fd19d3d939c866e805212d8d66a.json",
20+
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/b0462850439179659920597f4327262b24073af4f4969622163b0a295fce1dda.json",
2121
"requiresBootstrapStackVersion": 6,
2222
"bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
2323
"additionalDependencies": [

‎packages/@aws-cdk/aws-appsync/test/integ.auth-apikey.js.snapshot/tree.json

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,14 @@
8282
"id": "ServiceRole",
8383
"path": "aws-appsync-integ/Api/testDataSource/ServiceRole",
8484
"children": {
85+
"ImportServiceRole": {
86+
"id": "ImportServiceRole",
87+
"path": "aws-appsync-integ/Api/testDataSource/ServiceRole/ImportServiceRole",
88+
"constructInfo": {
89+
"fqn": "@aws-cdk/core.Resource",
90+
"version": "0.0.0"
91+
}
92+
},
8593
"Resource": {
8694
"id": "Resource",
8795
"path": "aws-appsync-integ/Api/testDataSource/ServiceRole/Resource",
@@ -94,7 +102,7 @@
94102
"Action": "sts:AssumeRole",
95103
"Effect": "Allow",
96104
"Principal": {
97-
"Service": "appsync"
105+
"Service": "appsync.amazonaws.com"
98106
}
99107
}
100108
],
@@ -363,7 +371,7 @@
363371
"path": "Tree",
364372
"constructInfo": {
365373
"fqn": "constructs.Construct",
366-
"version": "10.1.140"
374+
"version": "10.1.161"
367375
}
368376
}
369377
},

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-elasticsearch.js.snapshot/appsync-elasticsearch.assets.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
{
22
"version": "21.0.0",
33
"files": {
4-
"677bc89625ae9e4bce11a3674b3575c54aa714db0cc253c6121311ab6a929305": {
4+
"08fe8252ae99e2f46d03e04321cb848d70ee9c2656baeb387f3baae1575b1d87": {
55
"source": {
66
"path": "appsync-elasticsearch.template.json",
77
"packaging": "file"
88
},
99
"destinations": {
1010
"current_account-current_region": {
1111
"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
12-
"objectKey": "677bc89625ae9e4bce11a3674b3575c54aa714db0cc253c6121311ab6a929305.json",
12+
"objectKey": "08fe8252ae99e2f46d03e04321cb848d70ee9c2656baeb387f3baae1575b1d87.json",
1313
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
1414
}
1515
}

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-elasticsearch.js.snapshot/appsync-elasticsearch.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@
9090
"Action": "sts:AssumeRole",
9191
"Effect": "Allow",
9292
"Principal": {
93-
"Service": "appsync"
93+
"Service": "appsync.amazonaws.com"
9494
}
9595
}
9696
],

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-elasticsearch.js.snapshot/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"validateOnSynth": false,
1818
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
1919
"cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
20-
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/677bc89625ae9e4bce11a3674b3575c54aa714db0cc253c6121311ab6a929305.json",
20+
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/08fe8252ae99e2f46d03e04321cb848d70ee9c2656baeb387f3baae1575b1d87.json",
2121
"requiresBootstrapStackVersion": 6,
2222
"bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
2323
"additionalDependencies": [

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-elasticsearch.js.snapshot/tree.json

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -165,6 +165,14 @@
165165
"id": "ServiceRole",
166166
"path": "appsync-elasticsearch/api/ds/ServiceRole",
167167
"children": {
168+
"ImportServiceRole": {
169+
"id": "ImportServiceRole",
170+
"path": "appsync-elasticsearch/api/ds/ServiceRole/ImportServiceRole",
171+
"constructInfo": {
172+
"fqn": "@aws-cdk/core.Resource",
173+
"version": "0.0.0"
174+
}
175+
},
168176
"Resource": {
169177
"id": "Resource",
170178
"path": "appsync-elasticsearch/api/ds/ServiceRole/Resource",
@@ -177,7 +185,7 @@
177185
"Action": "sts:AssumeRole",
178186
"Effect": "Allow",
179187
"Principal": {
180-
"Service": "appsync"
188+
"Service": "appsync.amazonaws.com"
181189
}
182190
}
183191
],
@@ -383,7 +391,7 @@
383391
"path": "Tree",
384392
"constructInfo": {
385393
"fqn": "constructs.Construct",
386-
"version": "10.1.140"
394+
"version": "10.1.161"
387395
}
388396
}
389397
},

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-iam.js.snapshot/aws-appsync-integ.assets.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@
1414
}
1515
}
1616
},
17-
"5adac1311d44e3f6eafd25a229c84d03d0e6281172ec45c266b80a5201176917": {
17+
"8d15941ec2e2ee7e1551ec111288fbf5f90d3c8054ccd83a9d3f4995d2475536": {
1818
"source": {
1919
"path": "aws-appsync-integ.template.json",
2020
"packaging": "file"
2121
},
2222
"destinations": {
2323
"current_account-current_region": {
2424
"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
25-
"objectKey": "5adac1311d44e3f6eafd25a229c84d03d0e6281172ec45c266b80a5201176917.json",
25+
"objectKey": "8d15941ec2e2ee7e1551ec111288fbf5f90d3c8054ccd83a9d3f4995d2475536.json",
2626
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
2727
}
2828
}

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-iam.js.snapshot/aws-appsync-integ.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@
7474
"Action": "sts:AssumeRole",
7575
"Effect": "Allow",
7676
"Principal": {
77-
"Service": "appsync"
77+
"Service": "appsync.amazonaws.com"
7878
}
7979
}
8080
],

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-iam.js.snapshot/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"validateOnSynth": false,
1818
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
1919
"cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
20-
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/5adac1311d44e3f6eafd25a229c84d03d0e6281172ec45c266b80a5201176917.json",
20+
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/8d15941ec2e2ee7e1551ec111288fbf5f90d3c8054ccd83a9d3f4995d2475536.json",
2121
"requiresBootstrapStackVersion": 6,
2222
"bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
2323
"additionalDependencies": [

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-iam.js.snapshot/tree.json

Lines changed: 26 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -125,6 +125,14 @@
125125
"id": "ServiceRole",
126126
"path": "aws-appsync-integ/Api/ds/ServiceRole",
127127
"children": {
128+
"ImportServiceRole": {
129+
"id": "ImportServiceRole",
130+
"path": "aws-appsync-integ/Api/ds/ServiceRole/ImportServiceRole",
131+
"constructInfo": {
132+
"fqn": "@aws-cdk/core.Resource",
133+
"version": "0.0.0"
134+
}
135+
},
128136
"Resource": {
129137
"id": "Resource",
130138
"path": "aws-appsync-integ/Api/ds/ServiceRole/Resource",
@@ -137,7 +145,7 @@
137145
"Action": "sts:AssumeRole",
138146
"Effect": "Allow",
139147
"Principal": {
140-
"Service": "appsync"
148+
"Service": "appsync.amazonaws.com"
141149
}
142150
}
143151
],
@@ -418,6 +426,14 @@
418426
"id": "LambdaIAM",
419427
"path": "aws-appsync-integ/LambdaIAM",
420428
"children": {
429+
"ImportLambdaIAM": {
430+
"id": "ImportLambdaIAM",
431+
"path": "aws-appsync-integ/LambdaIAM/ImportLambdaIAM",
432+
"constructInfo": {
433+
"fqn": "@aws-cdk/core.Resource",
434+
"version": "0.0.0"
435+
}
436+
},
421437
"Resource": {
422438
"id": "Resource",
423439
"path": "aws-appsync-integ/LambdaIAM/Resource",
@@ -655,6 +671,14 @@
655671
"id": "ServiceRole",
656672
"path": "aws-appsync-integ/testFail/ServiceRole",
657673
"children": {
674+
"ImportServiceRole": {
675+
"id": "ImportServiceRole",
676+
"path": "aws-appsync-integ/testFail/ServiceRole/ImportServiceRole",
677+
"constructInfo": {
678+
"fqn": "@aws-cdk/core.Resource",
679+
"version": "0.0.0"
680+
}
681+
},
658682
"Resource": {
659683
"id": "Resource",
660684
"path": "aws-appsync-integ/testFail/ServiceRole/Resource",
@@ -796,7 +820,7 @@
796820
"path": "Tree",
797821
"constructInfo": {
798822
"fqn": "constructs.Construct",
799-
"version": "10.1.140"
823+
"version": "10.1.161"
800824
}
801825
}
802826
},

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-opensearch.js.snapshot/appsync-opensearch.assets.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
{
22
"version": "21.0.0",
33
"files": {
4-
"903ac542751f81532f9e013089671ab922c9965229f246a3850375eab1a3ea3e": {
4+
"afad76ea31dfbff09b61eded5f1d5e5fd22e29130ce087d5f25b2a31f470128a": {
55
"source": {
66
"path": "appsync-opensearch.template.json",
77
"packaging": "file"
88
},
99
"destinations": {
1010
"current_account-current_region": {
1111
"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
12-
"objectKey": "903ac542751f81532f9e013089671ab922c9965229f246a3850375eab1a3ea3e.json",
12+
"objectKey": "afad76ea31dfbff09b61eded5f1d5e5fd22e29130ce087d5f25b2a31f470128a.json",
1313
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
1414
}
1515
}

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-opensearch.js.snapshot/appsync-opensearch.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@
8787
"Action": "sts:AssumeRole",
8888
"Effect": "Allow",
8989
"Principal": {
90-
"Service": "appsync"
90+
"Service": "appsync.amazonaws.com"
9191
}
9292
}
9393
],

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-opensearch.js.snapshot/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"validateOnSynth": false,
1818
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
1919
"cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
20-
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/903ac542751f81532f9e013089671ab922c9965229f246a3850375eab1a3ea3e.json",
20+
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/afad76ea31dfbff09b61eded5f1d5e5fd22e29130ce087d5f25b2a31f470128a.json",
2121
"requiresBootstrapStackVersion": 6,
2222
"bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
2323
"additionalDependencies": [

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-opensearch.js.snapshot/tree.json

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -162,6 +162,14 @@
162162
"id": "ServiceRole",
163163
"path": "appsync-opensearch/api/ds/ServiceRole",
164164
"children": {
165+
"ImportServiceRole": {
166+
"id": "ImportServiceRole",
167+
"path": "appsync-opensearch/api/ds/ServiceRole/ImportServiceRole",
168+
"constructInfo": {
169+
"fqn": "@aws-cdk/core.Resource",
170+
"version": "0.0.0"
171+
}
172+
},
165173
"Resource": {
166174
"id": "Resource",
167175
"path": "appsync-opensearch/api/ds/ServiceRole/Resource",
@@ -174,7 +182,7 @@
174182
"Action": "sts:AssumeRole",
175183
"Effect": "Allow",
176184
"Principal": {
177-
"Service": "appsync"
185+
"Service": "appsync.amazonaws.com"
178186
}
179187
}
180188
],
@@ -380,7 +388,7 @@
380388
"path": "Tree",
381389
"constructInfo": {
382390
"fqn": "constructs.Construct",
383-
"version": "10.1.140"
391+
"version": "10.1.161"
384392
}
385393
}
386394
},

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-schema.js.snapshot/code-first-schema.assets.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
{
22
"version": "21.0.0",
33
"files": {
4-
"f6f3bfb6532202fee41687862ae38f3c519fa381a9af9e41f6e780c306536912": {
4+
"bfa90308faf90c034f02eb4ce506884c1ec79dec3a45f8ac7003fb57500a6ec4": {
55
"source": {
66
"path": "code-first-schema.template.json",
77
"packaging": "file"
88
},
99
"destinations": {
1010
"current_account-current_region": {
1111
"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
12-
"objectKey": "f6f3bfb6532202fee41687862ae38f3c519fa381a9af9e41f6e780c306536912.json",
12+
"objectKey": "bfa90308faf90c034f02eb4ce506884c1ec79dec3a45f8ac7003fb57500a6ec4.json",
1313
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
1414
}
1515
}

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-schema.js.snapshot/code-first-schema.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
"Action": "sts:AssumeRole",
4343
"Effect": "Allow",
4444
"Principal": {
45-
"Service": "appsync"
45+
"Service": "appsync.amazonaws.com"
4646
}
4747
}
4848
],

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-schema.js.snapshot/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"validateOnSynth": false,
1818
"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
1919
"cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
20-
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/f6f3bfb6532202fee41687862ae38f3c519fa381a9af9e41f6e780c306536912.json",
20+
"stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/bfa90308faf90c034f02eb4ce506884c1ec79dec3a45f8ac7003fb57500a6ec4.json",
2121
"requiresBootstrapStackVersion": 6,
2222
"bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
2323
"additionalDependencies": [

‎packages/@aws-cdk/aws-appsync/test/integ.graphql-schema.js.snapshot/tree.json

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,14 @@
8282
"id": "ServiceRole",
8383
"path": "code-first-schema/code-first-api/planets/ServiceRole",
8484
"children": {
85+
"ImportServiceRole": {
86+
"id": "ImportServiceRole",
87+
"path": "code-first-schema/code-first-api/planets/ServiceRole/ImportServiceRole",
88+
"constructInfo": {
89+
"fqn": "@aws-cdk/core.Resource",
90+
"version": "0.0.0"
91+
}
92+
},
8593
"Resource": {
8694
"id": "Resource",
8795
"path": "code-first-schema/code-first-api/planets/ServiceRole/Resource",
@@ -94,7 +102,7 @@
94102
"Action": "sts:AssumeRole",
95103
"Effect": "Allow",
96104
"Principal": {
97-
"Service": "appsync"
105+
"Service": "appsync.amazonaws.com"
98106
}
99107
}
100108
],
@@ -366,7 +374,7 @@
366374
"path": "Tree",
367375
"constructInfo": {
368376
"fqn": "constructs.Construct",
369-
"version": "10.1.140"
377+
"version": "10.1.161"
370378
}
371379
}
372380
},

0 commit comments

Comments
 (0)