title: AWS Appsync Http resolver for IOT device shadow
body: <p>Im trying (in vain) to get a device shadow through appsync Http resolvers. </p>
  
  <pre><code>  {
     "version": "2018-05-29",
     "method": "GET",
     "resourcePath": "/things/${ctx.args.id}/shadow",
      "params":{
          "headers": 
            $utils.toJson($utils.http.copyHeaders($ctx.request.headers))
      }
    }
  </code></pre>
  
  <p>All im managing to get as a response is <strong>"Credential should be scoped to correct service"</strong>
  I can see that the Authorization header for the call contains
  <em>"Credential = ---/---/eu-west-1/<strong>appsync</strong>/aws4_request"</em></p>
  
  <p>When i call GET "deviceShadow" it as REST in my application today (which works)  the same values are 
  <em>"Credential = ---/---/eu-west-1/<strong>iotdata</strong>/aws4_request"</em></p>
  
  <p>So it seams like appsync is being set as  the service and that is messing up the call? 
  Any tips how to get this working? </p>