feat: support custom SSL certificates in SQL data sources

[palpatim]

Problem

Enables end-to-end support for custom SSL certificates in SQL data sources by tying together all of:

• feat(generate-schema): custom ssl cert support to generate schema command amplify-category-api#2615
• feat: support custom SSL certs in SQL lambda handler amplify-category-api#2631
• feat: support custom SSL certificates in SQL data sources amplify-data#237

Docs update: aws-amplify/docs#7802

New public API

Data schema configuration now includes the ability to define an sslCert secret.

const schema = configure({
  database: {
    engine: 'mysql',
    connectionUri: secret('SQL_CONNECTION_STRING'),
    // v----- Added
    sslCert: secret('CUSTOM_SSL_CERT'),
  },
});

The sslCert secret will be resolved at deploy time and passed to the CDK construct sslCertConfig setting added in the @aws-amplify/data-construct 1.9.0 release.

Changeset

This change introduces a new feature API. The only code changes are in @aws-amplify/backend-data. There are explicit dependency updates in both @aws-amplify/backend-data and @aws-amplify/schema-generator:

• @aws-amplify/backend-data
• @aws-amplify/schema-generator

Validation

• Unit tests
• New unit tests included
• Manual testing

Checklist

• If this PR includes a functional change to the runtime behavior of the code, I have added or updated automated test coverage for this change.
• If this PR requires a docs update, I have linked to that docs PR.
• If this PR modifies E2E tests, makes changes to resource provisioning, or makes SDK calls, I have run the PR checks with the run-e2e label set.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[changeset-bot]

🦋 Changeset detected

Latest commit: 331f369

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@aws-amplify/backend-data	Minor
@aws-amplify/schema-generator	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[palpatim]

--build takes multiple source directories as arguments. The previous construction of this command meant that the --watch argument from the watch script ("npm run build -- --watch") only applied to tsc --build scripts.

[edwardfoyle]

functionally LGTM, just a comment on the changeset

[palpatim]

Converting to draft to wait for amplify-category-api release, to consume aws-amplify/amplify-category-api#2680, which fixes the attribute name created by ampx generate schema-from-database

[palpatim]

amplify-category-api release is complete, ready to re-review