Grant Lambda function access to API and Data

import {
  a,
  defineData,
  defineFunction,
  type ClientSchema
} from '@aws-amplify/backend';

const functionWithDataAccess = defineFunction({
  entry: '../functions/data-access.ts'
});

const schema = a
  .schema({
    Todo: a.model({
      name: a.string(),
      description: a.string()
    })
  })
  .authorization(allow => [allow.resource(functionWithDataAccess)]);
Copy  highlighted code example

export type Schema = ClientSchema<typeof schema>;

export const data = defineData({
  schema
});

const schema = a
  .schema({
    Todo: a.model({
      name: a.string(),
      description: a.string()
    })
  })
  .authorization(allow => [
    allow.resource(functionWithDataAccess).to(['query', 'listen'])
  ]); // allow query and subscription operations but not mutations
Copy  highlighted code example

import { Amplify } from 'aws-amplify';
import { generateClient } from 'aws-amplify/data';
import { Schema } from '../data/resource';
import { env } from '$amplify/env/<function-name>'; // replace with your function name


Amplify.configure(
  {
    API: {
      GraphQL: {
        endpoint: env.<amplifyData>_GRAPHQL_ENDPOINT, // replace with your defineData name
        region: env.AWS_REGION,
        defaultAuthMode: 'identityPool'
      }
    }
  },
  {
    Auth: {
      credentialsProvider: {
        getCredentialsAndIdentityId: async () => ({
          credentials: {
            accessKeyId: env.AWS_ACCESS_KEY_ID,
            secretAccessKey: env.AWS_SECRET_ACCESS_KEY,
            sessionToken: env.AWS_SESSION_TOKEN,
          },
        }),
        clearCredentialsAndIdentityId: () => {
          /* noop */
        },
      },
    },
  }
);

const dataClient = generateClient<Schema>();

export const handler = async (event) => {
  // your function code goes here
}

npx ampx generate graphql-client-code --out <path-function-handler-dir>/graphql

const client = generateClient<Schema>();

export const handler = async (event) => {
  await client.graphql({
    query: createTodo,
    variables: {
      input: {
        name: "My first todo",
        description: "This is my first todo",
      },
    },
  });


  await client.graphql({
    query: listTodos,
  });

  return event;
};