Multiple GraphQL schemas (e.g. 1 CRUD, 1 readonly) with on backend

[hkopf]

we want to build a service that has a CRUD GraphQL API for managing the data for authenticated users and on the other hand offer a readonly GraphQL API for retrieving the public data. We easily created the CRUD schema and are able to poulate and query the data.

In addition to the CRUD API for "editorial users" we want to offer a very limited schema with only queries that are designed for public usage. Why? We do not want to confuse public users of the API with lots of quereies/mutations that they cannot use.

When using @auth in the schema, public users also see the whole schema but receive authentication errors when trying to run mutations or private queries.

I also tried running amplify add api but I cannot add a 2nd GraphQL API ("You already have an AppSync API in your project...").

Added multiple schema/*.graphql files, but they are - of course - only merged together to one schema.

Is there any way to achieve this using amplicy-cli or do I need to setup another AppSync endpoint outside of Amplify and wire it up with the same DynamoDB?