Difficult to understand error when missing mutation permissions in resource.ts

[lets-getitnow]

Environment information

Latest

Describe the feature

From: https://discord.com/channels/705853757799399426/1350993554939318292

We see this error,
{"errorType":"Error","errorMessage":"The data environment variables are malformed. env={\"QUERY_LIMIT\":\"3\",\"AWS_LAMBDA_FUNCTION_VERSION\":\"$LATEST\",\"AWS_SESSION_TOKEN\":\"abc123\",\"LD_LIBRA

it was caused by not having
allow.resource(<my-func>).to(['query','mutate'])

Error should be more clear. Took us days to track down.

Use case

Basic config

[pahud]

Hi @lets-getitnow,

Thanks for reporting this issue and providing the Discord context. The error message you encountered appears to be a valid concern about developer experience.

The error "The data environment variables are malformed" is thrown by the extendEnv function when it cannot find the required data environment variables. This typically happens when the Lambda function hasn't been granted resource access via allow.resource(myFunc).to(['query', 'mutate']) in your schema authorization.

The current error message could be improved in several ways:

1. Detect when data-specific environment variables are missing and suggest checking schema authorization
2. Provide a more actionable error message like: "Missing data resource permissions. Ensure your function is granted access using allow.resource(myFunc) in your schema authorization"
3. List which specific variables are missing rather than dumping the entire environment

This would be a valuable enhancement to reduce debugging time for developers encountering this configuration issue. The change would be in the extendEnv function to provide more specific guidance when the validation fails.