Front-End Web & Mobile

Tag: fullstack development

Secure AWS AppSync with Amazon Cognito using the AWS CDK

In a previous post, we explored how a public API Key for AWS AppSync provides a simple way of allowing access to resources, however, it does come with the following tradeoffs: Expiring after a certain amount of time. The key is passed on the x-api-key header of the request. Making it easy for bad actors […]

Secure AWS AppSync with API Keys using the AWS CDK

Secure AWS AppSync with API Keys using the AWS CDK

AWS AppSync is a managed GraphQL service offered by AWS. As a managed service, there are no servers to keep track of and scaling up and down due to traffic is automatically handled by AWS. In AppSync, there is no concept of a fully-public API. Every request must be protected by one of the following: […]