Skip to content

Latest commit

 

History

History
41 lines (29 loc) · 2.96 KB

README.md

File metadata and controls

41 lines (29 loc) · 2.96 KB

AppSync

Parity grade: A · SDK aws-sdk-go-v2/service/appsync@v1.62.3 · last audited 2026-10-12 (0c1472972)

Coverage

Metric Value
PARITY entries audited 74 (74 ok)
Feature families 15 (15 ok)
Known gaps 7
Structural gaps (can't be emulated) 1
Deferred items 2
Resource leaks bugs found

Known gaps

  • Introspection omits __Type.specifiedByURL and isOneOf, and ListTypes/GetType/ListTypesByAssociation ignore the SDL/JSON format parameter; the real per-type JSON shape is unverified. 2026-10-01.
  • GetIntrospectionSchema returns an undeclared BadRequestException for an unknown format; no declared exception (GraphQLSchema/Internal/NotFound/Unauthorized) fits. 2026-10-01.
  • GraphqlApi dns and Api dns are unmodeled: the dns key set is unverified.
  • errors[].path is set for root fields only; non-null field null-propagation is not implemented. 2026-10-20.
  • OpenSearch/Elasticsearch data sources run in-process against services/opensearch domains matched by endpoint host (requests are not SigV4-signed; AMAZON_ELASTICSEARCH resolves against OpenSearch domains only, not services/elasticsearch); EventBridge and RDS (Data API) run in-process; the RDS JS select/insert/update/remove builders are a documented subset (no joins/groupBy/aggregates), MySQL returning is emulated with a follow-up SELECT. 2026-10-20.
  • $extensions.* calls are recorded but have no effect (no resolver cache layer, subscription filters are not applied); $util.transform.toElasticsearchQueryDSL, DynamoDB sync/batch JS helpers and Lambda BatchInvoke are absent. 2026-10-20.
  • EvaluateCode/EvaluateMappingTemplate errors carry message only (no codeErrors locations); EvaluateMappingTemplate has no logs. 2026-10-20.

Structural gaps

These do not block an A grade — no implementation could produce real data here because the underlying data source cannot exist in an emulator.

  • Cognito/OIDC issuers with no local signing key are rejected because external JWKS endpoints are never fetched (no external network).

Deferred

  • CloudTrail-capture chokepoint / pkgs/service integration — not audited (shared/cross-service, out of scope per this task's edit boundary).
  • DataSourceIntrospection real model content: gopherstack has no RDS Data API backend to introspect against, so StartDataSourceIntrospection/GetDataSourceIntrospection always complete SUCCESS with an empty models list rather than real table/column data. Wire shape, error codes (BadRequestException on missing/incomplete rdsDataApiConfig, NotFoundException on unknown introspectionId), and persisted per-ID state are all real and field-diffed against the SDK; only the introspected content is out of scope. Would require a services/rds (or similar) cross-service integration to fix — out of this task's services/appsync/ edit boundary.

More