Sample AppSync API will be secured by AWS IAM and baked by AWS Lambda function.
Final code can be found at https://github.com/mgjam/blog/tree/master/3.
The guide is split into several topics to keep each section short and understandable.