feat: Add lambda as additional auth provider (#52)

Author: jindrichskupa

examples/complete/main.tf

@@ -139,6 +139,13 @@ module "appsync" {
         app_id_client_regex = aws_cognito_user_pool_client.this.id
       }
     }
+
+    lambda = {
+      authentication_type = "AWS_LAMBDA"
+      lambda_authorizer_config = {
+        authorizer_uri = "arn:aws:lambda:eu-west-1:835367859851:function:appsync_auth_2"
+      }
+    }
   }
 
   functions = {

main.tf

@@ -83,6 +83,15 @@ resource "aws_appsync_graphql_api" "this" {
           aws_region          = lookup(user_pool_config.value, "aws_region", null)
         }
       }
+      dynamic "lambda_authorizer_config" {
+        for_each = length(keys(lookup(additional_authentication_provider.value, "lambda_authorizer_config", {}))) == 0 ? [] : [additional_authentication_provider.value.lambda_authorizer_config]
+
+        content {
+          authorizer_uri                   = lambda_authorizer_config.value.authorizer_uri
+          authorizer_result_ttl_in_seconds = lookup(lambda_authorizer_config.value, "authorizer_result_ttl_in_seconds", null)
+          identity_validation_expression   = lookup(lambda_authorizer_config.value, "identity_validation_expression", null)
+        }
+      }
     }
   }