IAM Role: AWS/AppSync/Admin
| Permission | Grant |
|---|
| appsync:CreateApiKey | Admin |
| appsync:CreateDataSource | Admin |
| appsync:CreateGraphqlApi | Admin |
| appsync:CreateResolver | Admin |
| appsync:CreateType | Admin |
| appsync:DeleteApiKey | Admin |
| appsync:DeleteDataSource | Admin |
| appsync:DeleteGraphqlApi | Admin |
| appsync:DeleteResolver | Admin |
| appsync:DeleteType | Admin |
| appsync:GraphQL | Admin |
| appsync:StartSchemaCreation | Admin |
| appsync:UpdateApiKey | Admin |
| appsync:UpdateDataSource | Admin |
| appsync:UpdateGraphqlApi | Admin |
| appsync:UpdateResolver | Admin |
| appsync:UpdateType | Admin |
| iam:PassRole | Admin |
| appsync:GetDataSource | Metadata |
| appsync:GetGraphqlApi | Metadata |
| appsync:GetIntrospectionSchema | Metadata |
| appsync:GetResolver | Metadata |
| appsync:GetSchemaCreationStatus | Metadata |
| appsync:GetType | Metadata |
| appsync:ListApiKeys | Metadata |
| appsync:ListDataSources | Metadata |
| appsync:ListGraphqlApis | Metadata |
| appsync:ListResolvers | Metadata |
| appsync:ListTypes | Metadata |
| cognito-idp:ListUserPools | Metadata |
| dynamodb:DescribeTable | Metadata |
| dynamodb:ListTables | Metadata |
| es:DescribeElasticsearchDomain | Metadata |
| es:ListDomainNames | Metadata |
| iam:ListRoles | Metadata |
| lambda:ListFunctions | Metadata |
