Skip to content
hands-on lab

Securing an AWS AppSync API With Amazon Cognito

Difficulty: Intermediate
Duration: Up to 1 hour
Students: 59
Rating: 5/5
Start lab
On average, students complete this lab in35m
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.
About
Author

Description

AWS AppSync authorization is a crucial configuration as it defines which users or identities are allowed to access an API. An AppSync API can define access controls for the queries, mutations, subscriptions, and fields defined in the schema. AppSync supports several identity providers to suit different use cases, and even allows fine-grained access control at the resolver level.

In this lab, you will learn the five supported authorization types, and perform the configurations necessary to associate an AppSync API with an Amazon Cognito User Pool. You will also provide an additional layer of data protection by applying fine-grained access controls on API resolvers.

Learning objectives

Upon completion of this intermediate-level lab, you will be able to:

  • Provide authorized access to an AWS AppSync API using an Amazon Cognito User Pool
  • Apply fine-grained access control to AWS AppSync resolvers

Intended audiences

  • Candidates for the AWS Certified Developer - Associate Certification
  • Cloud Architects
  • Software Engineers
  • Serverless Developers

Prerequisites

Familiarity with the following will be beneficial but is not required:

  • AWS AppSync
  • GraphQL
  • AWS DynamoDB

The following content can be used to fulfill the prerequisite:

Updates

July 7th, 2023 - Resolved intermittent deployment issue

Environment before

Environment after

Covered topics

Amazon Web Services
Development for AWS
Security for AWS
AWS AppSync
Amazon Cognito
Mobile for AWS
GraphQL
Mobile
Development
Security
Hands-on Lab UUID

Lab steps

0 of 4 steps completed.Use arrow keys to navigate between steps. Press Enter to go to a step if available.
  1. Logging In to the Amazon Web Services Console
  2. Selecting an AppSync API authentication method
  3. Authorizing AppSync API access using Amazon Cognito
  4. Applying fine-grained access control in AWS AppSync

Lab Rules