aws / aws-appsync-community

The AWS AppSync community
https://aws.amazon.com/appsync
Apache License 2.0
506 stars 32 forks source link

[Feature Request] CORS on AWS AppSync GraphQL calls #277

Open neilferreira opened 1 year ago

neilferreira commented 1 year ago

It would be great if AWS AppSync was able to support CORS in a similar fashion to the AWS API Gateway and other API services.

As it stands, there is no ability to restrict the allowed hostnames to limit the use of our API.

fedecastelli commented 9 months ago

yeah, it would be great otherwise anyone can create a fake public website and use your API. I wonder why they didn't implement it from the beginning.