Can I specify IAM user credentials for use in authenticating an AppSync API?

I am using Amplify to connect to an existing AppSync API from an automated device running node. This is not a front-end client, so I want to be able to connect using an IAM user’s security credentials.

I’m using the following code to confiture Amplify and make a GraphQL query, however I can’t find any documentation on how to pass the access key ID and secret access key to Amplify.configure().

const Amplify = require('aws-amplify').default
const { graphql } = require('aws-amplify')
const gql = require('aws-amplify').graphqlOperation

const queries = require('./queries')

const config = {
  aws_appsync_graphqlEndpoint: process.env.GRAPHQL_ENDPOINT,
  aws_appsync_region: process.env.AWS_REGION,
  aws_appsync_authenticationType: 'AWS_IAM',
  // What properties go here?
}

Amplify.configure(config)
graphql(gql(queries.testQuery, { key: 'value' }))
  .then((data) => {
    // Do something with result
  })

I’m currently getting the following messages:

Warning: 05:12:45 API - ensure credentials error: No Cognito Federated Identity pool provided Error: No credentials

Is it possible to connect with IAM security credentials directly, rather than a Cognito Identity Pool? What properties can be passed to Amplify.configure() in my config object to achieve this?

[kumishida]

@kumishida This might help.

const aws = require('aws-sdk')
const urlParse = require('url').URL
const appsyncUrl = process.env.API_APPNAME_GRAPHQLAPIENDPOINTOUTPUT
const endpoint = new urlParse(appsyncUrl).hostname.toString()

const region = 'YOUR_REGION'

aws.config.update({
	region: region,
	credentials: new aws.Credentials({
		accessKeyId: 'YOUR_ACCESS_ID',
		secretAccessKey: 'YOUR_SECRET_KEY'
	})
})

Thanks you for your suggestion! After update AWS config, I need to use AWSAppSyncClient to initialize. Here is my config:

import { AWSAppSyncClient, AUTH_TYPE } from 'aws-appsync';
import awsConfig from '../aws-exports';
import AWS from "aws-sdk/global";

const appsyncClient = new AWSAppSyncClient({
  url: awsConfig.aws_appsync_graphqlEndpoint,
  region: awsConfig.aws_appsync_region,
  auth: {
    type: AUTH_TYPE.AWS_IAM,
    credentials: new AWS.Credentials({
    accessKeyId: "ACCESS_KEY_ID",
    secretAccessKey: "SECRET_ACCESS_KEY"
  })  },
  disableOffline: true
});

[JonathanHolvey]

I’ll take a look, however I may not get an opportunity for a little while. Bear with me