AWSTemplateFormatVersion: 2010-09-09
Description: AppSync setup
Parameters:
  FunctionStack:
    Description: The stack name that deploys the Lambda functions to invoke.
    Type: String
Resources:
  DataSourceRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service: appsync.amazonaws.com
      Policies:
        - PolicyName: LambdaInvoker
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Action: lambda:InvokeFunction
                Effect: Allow
                Resource:
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-HealthCheck'
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-HealthCheck'
                      - ':*'
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-ServiceInfo'
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-ServiceInfo'
                      - ':*'
      RoleName: !Sub '${AWS::StackName}-lambda-role'
  GqlApi:
    Type: AWS::AppSync::GraphQLApi
    Properties:
      AuthenticationType:  AWS_IAM
      Name: !Ref AWS::StackName
  GqlSchema:
    Type: AWS::AppSync::GraphQLSchema
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      Definition: |
        type Mutation {

        }

        type Query {

          getHealthCheck(cognitoIdentityId__: String): HealthCheck

          getHealthCheck(cognitoIdentityId__: String): 

          getHealthCheck(cognitoIdentityId__: String): 

          getServiceInfo(cognitoIdentityId__: String): ServiceInfo

        }

        input AuditInput {
          createdAt: AWSDateTime
          createdBy: String
          updatedAt: AWSDateTime
          updatedBy: String
        }
        type Audit {
          createdAt: AWSDateTime! 
          createdBy: String! 
          updatedAt: AWSDateTime! 
          updatedBy: String! 
        }
        input ErrorLinksInput {
          about: 
          type: 
        }
        type ErrorLinks {
          about: 
          type: 
        }
        input ErrorSourceInput {
          source: String
          type: error_source_type
        }
        type ErrorSource {
          source: String! 
          type: error_source_type! 
        }
        input GenericErrorInput {
          code: String
          detail: String
          links: error_linksInput
          meta: AWSJSON
          source: error_sourceInput
          title: String
        }
        type GenericError {
          code: String! 
          detail: String! 
          links: error_links
          meta: AWSJSON
          source: error_source
          title: String! 
        }
        input HealthCheckInput {
          message: String
          status: health_status
        }
        type HealthCheck {
          message: String
          status: health_status! 
        }
        input LinkObjectInput {
          href: String
          title: String
          type: String
        }
        type LinkObject {
          href: String! 
          title: String
          type: String
        }
        input PageResponseInput {
          limit: Int
          offset: Int
          sort: [sortInput]
          totalPages: Int
          totalResults: Int
        }
        type PageResponse {
          limit: Int! 
          offset: Int! 
          sort: [sort]! 
          totalPages: Int! 
          totalResults: Int! 
        }
        input PagingFormInput {
          limit: Int
          offset: Int
          sort: [sortInput]
        }
        type PagingForm {
          limit: Int! 
          offset: Int! 
          sort: [sort]
        }
        input ServiceInfoInput {
          description: String
          name: String
          title: String
          uri: String
          version: String
        }
        type ServiceInfo {
          description: String
          name: String! 
          title: String
          uri: String! 
          version: String! 
        }
        input SortInput {
          direction: sort_direction
          property: String
        }
        type Sort {
          direction: sort_direction! 
          property: String! 
        }

        enum ErrorSourceType {
          HEADER
          PARAMETER
          POINTER
        }
        enum HealthStatus {
          RUNNING
          STARTING
          UNHEALTHY
        }
        enum SortDirection {
          ASC
          DESC
        }

        schema {
          query: Query
          mutation: Mutation
        }
    DependsOn:
      - GqlApi
  HealthCheckDataSource:
    Type: AWS::AppSync::DataSource
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      LambdaConfig:
        LambdaFunctionArn:
          Fn::Join:
            - ''
            - - 'arn:aws:lambda:'
              - !Ref AWS::Region
              - ':'
              - !Ref AWS::AccountId
              - ':function:'
              - Fn::ImportValue:
                  !Sub '${FunctionStack}-functions-HealthCheck'
      Name: health_check_lambda
      ServiceRoleArn: !GetAtt DataSourceRole.Arn
      Type: AWS_LAMBDA
    DependsOn:
      - DataSourceRole
      - GqlApi
  GetHealthCheckResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getHealthCheck
      TypeName: Query
      DataSourceName: !GetAtt HealthCheckDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {

            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - HealthCheckDataSource
  GetHealthCheckResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getHealthCheck
      TypeName: Query
      DataSourceName: !GetAtt HealthCheckDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {

            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - HealthCheckDataSource
  GetHealthCheckResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getHealthCheck
      TypeName: Query
      DataSourceName: !GetAtt HealthCheckDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {

            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - HealthCheckDataSource
  ServiceInfoDataSource:
    Type: AWS::AppSync::DataSource
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      LambdaConfig:
        LambdaFunctionArn:
          Fn::Join:
            - ''
            - - 'arn:aws:lambda:'
              - !Ref AWS::Region
              - ':'
              - !Ref AWS::AccountId
              - ':function:'
              - Fn::ImportValue:
                  !Sub '${FunctionStack}-functions-ServiceInfo'
      Name: service_info_lambda
      ServiceRoleArn: !GetAtt DataSourceRole.Arn
      Type: AWS_LAMBDA
    DependsOn:
      - DataSourceRole
      - GqlApi
  GetServiceInfoResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getServiceInfo
      TypeName: Query
      DataSourceName: !GetAtt ServiceInfoDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {

            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceInfoDataSource
Outputs:
  ApiEndpoint:
    Description: The endpoint for the AppSync API.
    Value: !GetAtt GqlApi.GraphQLUrl