Front-End Web & Mobile
Tag: security
AWS AppSync Merged APIs Best Practices: Part 3 – Security
In this AWS AppSync Merged API – Best practices series, we cover important topics for developers, architects, and security engineers who are creating and managing AWS AppSync Merged and Source APIs. This multi-part series discusses best practices on schema composition, security, deployment and testing and subscriptions for Merged APIs. AWS AppSync offers Merged APIs, which […]
Secure AWS AppSync with Amazon Cognito using the AWS CDK
In a previous post, we explored how a public API Key for AWS AppSync provides a simple way of allowing access to resources, however, it does come with the following tradeoffs: Expiring after a certain amount of time. The key is passed on the x-api-key header of the request. Making it easy for bad actors […]
Secure AWS AppSync with API Keys using the AWS CDK
AWS AppSync is a managed GraphQL service offered by AWS. As a managed service, there are no servers to keep track of and scaling up and down due to traffic is automatically handled by AWS. In AppSync, there is no concept of a fully-public API. Every request must be protected by one of the following: […]
Build a Mobile App with Passwordless Login on top of AWS Amplify
Note: The Amazon Cognito hosted UI (Web) does not support the custom authentication flow. According to the Gartner Group , 20% to 50% of all IT help desk tickets each year are password resets, meaning the average managed service provider (MSP) with 1,300 users wastes around $7.19 per user, adding up to an annual cost […]
AppSync adds support for AWS WAF
This article was written by Brice Pellé, Principal Specialist Solutions Architect, AWS AWS AppSync is a fully managed service that allows you to deploy Serverless GraphQL backends in the AWS cloud. With AppSync, you can have GraphQL backends that connect to multiple data sources, and that scale and grow with your usage. Whether you […]
GraphQL API Security with AWS AppSync and Amplify
This article was written by Brice Pellé, Principal Specialist Solutions Architect, AWS September 14, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. AWS AppSync is a fully managed service which allows to deploy and interact with serverless scalable GraphQL backends on AWS. AppSync uses security best practices that AWS has […]