これから始めるAppSync開発！AppSyncとGraphQL開発手法をCTOが解説します😎

service: todo-serverless
provider:
  name: aws
  runtime: nodejs12.
  stage: ${opt:stage,"dev"}
  region: ap-northeast-1
  profile: ragate
  environment:
    DYNAMODB_TABLE_PREFIX: ${self:provider.stage}

plugins:
  - serverless-appsync-plugin

custom:
  appSync: ${file(./appsync/stack.yml)}

resources:
  - ${file(./resources/cognito.yml)}
  - ${file(./resources/dynamodb-tables.yml)}
  - ${file(./resources/iam-role-statements.yml)}

Resources:
  ExampleUserPool:
    Type: 'AWS::Cognito::UserPool'
    Properties:
      AccountRecoverySetting:
        RecoveryMechanisms:
          - Name: 'verified_email'
            Priority: 1
      AdminCreateUserConfig:
        AllowAdminCreateUserOnly: false
        InviteMessageTemplate:
          EmailMessage: 'Your username is {username} and temporary password is {####}.'
          EmailSubject: 'Your temporary password'
          SMSMessage: 'Your username is {username} and temporary password is {####}.'
      AliasAttributes:
        - email
        - preferred_username 
      AutoVerifiedAttributes:
        - email
      DeviceConfiguration: 
        ChallengeRequiredOnNewDevice: false
        DeviceOnlyRememberedOnUserPrompt: false
      EmailConfiguration:
        EmailSendingAccount: COGNITO_DEFAULT
      EmailVerificationMessage: 'Your verification code is {####}.'
      EmailVerificationSubject: 'Your verification code'
      MfaConfiguration: OFF
      Policies:
        PasswordPolicy:
          MinimumLength: 8
          RequireLowercase: false
          RequireNumbers: false
          RequireSymbols: false
          RequireUppercase: false
          TemporaryPasswordValidityDays: 365
      Schema:
        - AttributeDataType: String
          DeveloperOnlyAttribute: false
          Mutable: true
          Name: email
          Required: true
      SmsAuthenticationMessage: 'Your verification code is {####}.'
      SmsVerificationMessage: 'Your verification code is {####}.'
      UsernameConfiguration:
        CaseSensitive: true
      UserPoolAddOns:
        AdvancedSecurityMode: AUDIT 
      UserPoolName: ${self:service}-${self:provider.stage}-user-pool
      UserPoolTags:
        Service: ${self:service}-${self:provider.stage}
      VerificationMessageTemplate:
        DefaultEmailOption: CONFIRM_WITH_CODE
        EmailMessage: 'Your verification code is {####}.'
        EmailSubject: 'Your verification code'
        SmsMessage: 'Your verification code is {####}.'

  ExampleUserPoolClient:
    Type: AWS::Cognito::UserPoolClient
    Properties:
      CallbackURLs:
        - 'http://localhost:3000'
      ClientName: ${self:service}-${self:provider.stage}-user-pool-client
      DefaultRedirectURI: 'http://localhost:3000'
      ExplicitAuthFlows:
        - ALLOW_USER_PASSWORD_AUTH
        - ALLOW_ADMIN_USER_PASSWORD_AUTH
        - ALLOW_USER_SRP_AUTH
        - ALLOW_REFRESH_TOKEN_AUTH
      LogoutURLs:
        - 'http://localhost:3000'
      PreventUserExistenceErrors: ENABLED
      ReadAttributes:
        - email
        - preferred_username
      RefreshTokenValidity: 10
      SupportedIdentityProviders:
        - COGNITO 
      UserPoolId:
        Ref: ExampleUserPool
      WriteAttributes: 
        - email
        - preferred_username

  ExampleUserPoolGroupCustomer:
    Type: AWS::Cognito::UserPoolGroup
    Properties:
      Description: '一般ユーザー（ToDo閲覧のみ可能）'
      GroupName: Customer
      Precedence: 1 
      UserPoolId: !Ref ExampleUserPool

  ExampleUserPoolGroupAdmin:
    Type: AWS::Cognito::UserPoolGroup
    Properties:
      Description: '管理者（ToDo閲覧及び作成が可能）'
      GroupName: Admin
      Precedence: 0
      UserPoolId: !Ref ExampleUserPool

Resources:
  todo:
    Type: 'AWS::DynamoDB::Table'
    DeletionPolicy: Retain
    Properties:
      TableName: ${self:provider.environment.DYNAMODB_TABLE_PREFIX}-example-todo
      AttributeDefinitions:
        - AttributeName: id
          AttributeType: S
      BillingMode: PAY_PER_REQUEST
      KeySchema:
        - AttributeName: id
          KeyType: HASH

Resources:
  AppSyncLoggingServiceRole:
    Type: AWS::IAM::Role
    Properties:
      Path: /
      RoleName: AppSyncLoggingServiceRole-${self:provider.stage}
      ManagedPolicyArns:
        - "arn:aws:iam::aws:policy/service-role/AWSAppSyncPushToCloudWatchLogs"
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"
            Principal:
              Service:
                - "appsync.amazonaws.com"
            Action:
              - "sts:AssumeRole"

- name: "PrivateAppsyncEndpoint"
  authenticationType: AMAZON_COGNITO_USER_POOLS
  schema:
    - appsync/schemas/todo.graphql
  caching:
    behavior: FULL_REQUEST_CACHING 
    ttl: 3600 
    atRestEncryption: 
    transitEncryption: 
    type: 'T2_SMALL'
  userPoolConfig:
    defaultAction: ALLOW 
    userPoolId: !Ref ExampleUserPool
  logConfig:
    loggingRoleArn: { Fn::GetAtt: [AppSyncLoggingServiceRole, Arn] }
    level: ERROR 
    excludeVerboseContent: false
  mappingTemplatesLocation: appsync/resolvers
  mappingTemplates:
    - ${file(./appsync/mappingtemplates.yml)}
  dataSources:
    - ${file(./appsync/datasources.yml)}

- type: AMAZON_DYNAMODB
  name: "ToDo"
  description: "It is toDo table."
  config:
    tableName: { Ref: todo } 
    versioned: false 

type Mutation {
    createTodo(input: CreateTodoInput!, condition: ModelTodoConditionInput): Todo
    @aws_auth(cognito_groups: ["Admin"])
}

type Query {
    getTodo(id: ID!): Todo
    listTodos(filter: ModelTodoFilterInput, limit: Int, nextToken: String): ModelTodoConnection
}

type Todo {
    id: ID!
    name: String!
    description: String
}

type ModelTodoConnection {
    items: [Todo]
    nextToken: String
}

input CreateTodoInput {
    id: ID
    name: String!
    description: String
}

input ModelBooleanInput {
    ne: Boolean
    eq: Boolean
    attributeExists: Boolean
    attributeType: ModelAttributeTypes
}

input ModelFloatInput {
    ne: Float
    eq: Float
    le: Float
    lt: Float
    ge: Float
    gt: Float
    between: [Float]
    attributeExists: Boolean
    attributeType: ModelAttributeTypes
}

input ModelIDInput {
    ne: ID
    eq: ID
    le: ID
    lt: ID
    ge: ID
    gt: ID
    contains: ID
    notContains: ID
    between: [ID]
    beginsWith: ID
    attributeExists: Boolean
    attributeType: ModelAttributeTypes
    size: ModelSizeInput
}

input ModelIntInput {
    ne: Int
    eq: Int
    le: Int
    lt: Int
    ge: Int
    gt: Int
    between: [Int]
    attributeExists: Boolean
    attributeType: ModelAttributeTypes
}

input ModelSizeInput {
    ne: Int
    eq: Int
    le: Int
    lt: Int
    ge: Int
    gt: Int
    between: [Int]
}

input ModelStringInput {
    ne: String
    eq: String
    le: String
    lt: String
    ge: String
    gt: String
    contains: String
    notContains: String
    between: [String]
    beginsWith: String
    attributeExists: Boolean
    attributeType: ModelAttributeTypes
    size: ModelSizeInput
}

input ModelTodoConditionInput {
    name: ModelStringInput
    description: ModelStringInput
    and: [ModelTodoConditionInput]
    or: [ModelTodoConditionInput]
    not: ModelTodoConditionInput
}

input ModelTodoFilterInput {
    id: ModelIDInput
    name: ModelStringInput
    description: ModelStringInput
    and: [ModelTodoFilterInput]
    or: [ModelTodoFilterInput]
    not: ModelTodoFilterInput
}

enum ModelSortDirection {
    ASC
    DESC
}

enum ModelAttributeTypes {
    binary
    binarySet
    bool
    list
    map
    number
    numberSet
    string
    stringSet
    _null
}

type Mutation {
    createTodo(input: CreateTodoInput!, condition: ModelTodoConditionInput): Todo
    @aws_auth(cognito_groups: ["Admin"])
}

type Query {
    getTodo(id: ID!): Todo
    listTodos(filter: ModelTodoFilterInput, limit: Int, nextToken: String): ModelTodoConnection
}

type Todo {
    id: ID!
    name: String!
    description: String
}

type ModelTodoConnection {
    items: [Todo]
    nextToken: String
}

input CreateTodoInput {
  ...
}

input ModelBooleanInput {
  ...
}

input ModelFloatInput {
  ...
}

input ModelIDInput {
  ...
}

input ModelIntInput {
  ...
}

input ModelSizeInput {
  ...
}

input ModelStringInput {
  ...
}

input ModelTodoConditionInput {
  ...
}

input ModelTodoFilterInput {
  ...
}

enum ModelSortDirection {
  ...
}

enum ModelAttributeTypes {
  ...
}

- dataSource: "ToDo"
  type: "Query"
  field: "listTodos"
- dataSource: "ToDo"
  type: "Mutation"
  field: "createTodo"

{
    "version": "2017-02-28",
    "operation": "Scan"
}

$util.toJson($ctx.result)

{
    "version" : "2017-02-28",
    "operation" : "PutItem",
    "key" : {
        ## If object "id" should come from GraphQL arguments, change to $util.dynamodb.toDynamoDBJson($ctx.args.id)
        "id": $util.dynamodb.toDynamoDBJson($util.autoId()),
    },
    "attributeValues" : $util.dynamodb.toMapValuesJson($context.args.input)
}

$util.toJson($ctx.result)

npm install -g serverless
cd [serverless.yml_directory]
sls deploy -v

version: 0.2

phases:
  install:
    runtime-versions:
      nodejs: 10
      docker: 18
  pre_build:
    commands:
      - yarn
      - npm install -g serverless
  build:
    commands:
      - yarn deploy
  post_build:
    commands:
      - echo Build completed on `date`