Amplify GraphQL APIをLambda Functionから操作する

type RequestRecord @model @auth(rules: [
  { allow: owner, ownerField: "User" },
  { allow: private, provider: iam }
]){
  RequestId: String! @primaryKey
  Status: Int!
  User: String
}

$ amplify update api

? Select a setting to edit.
> Authorization modes
? Configure additional auth types?
> yes
? Choose the additional authorization types you want to configure for the API.
> IAM

✅ Successfully updated resource

$ amplify update function

? Select the Lambda function you want to update.
> gql-function
? Which setting do you want to update?
> Resource access permissions
? Select the categories you want this function to have access to.
> API
? Select the operations you want to permit on gql-api.
> Query, Mutate

You can access the following resource attributes as environment variables from your Lambda function
  API_GQL-API_GRAPHQLAPIENDPOINTOUTPUT
  API_GQL-API_GRAPHQLAPIIDOUTPUT

{
  "name": "gql-function",
  "dependencies": {
    "aws-appsync": "^4.0.0",
    "aws-sdk": "^2.1084.0",
    "graphql": "^15.7.0",
    "graphql-tag": "^2.12.6",
    "isomorphic-fetch": "^3.0.0",
  }
}

import * as AWS from 'aws-sdk';
import { gql } from 'graphql-tag';
import { print } from 'graphql';
import AWSAppSyncClient from 'aws-appsync';
import 'isomorphic-fetch';

// デフォルトで~/src/graphql/mutation.ts に作成されるクエリを
// そのまま持ってきています。
// gqlにテンプレートリテラルとして読み込ませます。
const updateRecord = gql`
  mutation UpdateRequestRecord(
    $input: UpdateRequestRecordInput!
    $condition: ModelRequestRecordConditionInput
  ) {
    updateRequestRecord(input: $input, condition: $condition) {
      RequestId
      Status
      User
      createdAt
      updatedAt
    }
  }
`;

const gqlUpdate = async (
  url: string,
  region: string,
  RequestId: string,
  Record: object
) => {
  const client = new AWSAppSyncClient({
    url,
    region,
    auth: {
      type: 'AWS_IAM',
      credentials: (AWS.config.credentials ?? null)
    },
    disableOffline: true
  });
  try {
    await client.mutate({
      mutation: updateRecord,
      variables: {
        input: {
          RequestId,
          ...Record
        }
      }
    });
  } catch (error) {
    console.error(error);
  }
};

export default gqlUpdate;

import gqlUpdate from './graphqlOperations';

export const handler = async () => {
  // Any statements here...
  const requestId = 'hogehoge';
  await gqlUpdate(
    process.env['API_GQL-API_GRAPHQLAPIENDPOINTOUTPUT'],
    process.env['REGION'],
    requestId,
    { Status: 0 }
  );
};

{
    "errorType": "TypeError",
    "errorMessage": "Cannot convert undefined or null to object",
    "stack": [
        "TypeError: Cannot convert undefined or null to object",
        "    at Function.keys (<anonymous>)",
        "    at /var/task/node_modules/apollo-cache-inmemory/lib/bundle.umd.js:331:12",
        "    at /var/task/node_modules/apollo-cache-inmemory/lib/bundle.umd.js:2:68",
        "    at Object.<anonymous> (/var/task/node_modules/apollo-cache-inmemory/lib/bundle.umd.js:5:2)",
        "    at Module._compile (internal/modules/cjs/loader.js:1085:14)",
        "    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1114:10)",
        "    at Module.load (internal/modules/cjs/loader.js:950:32)",
        "    at Function.Module._load (internal/modules/cjs/loader.js:790:12)",
        "    at Module.require (internal/modules/cjs/loader.js:974:19)",
        "    at require (internal/modules/cjs/helpers.js:101:18)"
    ]
}

Error: fetch is not found globally and no fetcher passed,
to fix pass a fetch for your environment like https://www.npmjs.com/package/node-fetch."

For example:
import fetch from 'node-fetch';
import { createHttpLink } from 'apollo-link-http';
const link = createHttpLink({ uri: '/graphql', fetch: fetch });

ERROR	ApolloError: GraphQL error: Not Authorized to access ** on type Mutation
  graphQLErrors: [
    {
      path: [Array],
      data: null,
      errorType: 'Unauthorized',
      errorInfo: null,
      locations: [Array],
      message: 'Not Authorized to access ** on type Mutation'
    }
  ],
  networkError: null,
  extraInfo: undefined
}

{
  "adminRoleNames": ["arn:aws:sts::(アカウント番号):assumed-role"]
}