Need a way to handle auth

[garnaat]

AFAICT, there is currently no way to get any kind of authentication of requests.

[daneah]

Are you referring to basic HTTP authentication? I could imagine building OAuth into your API with the existing functionality, but I could be missing something 😄

[JamieCressey]

API Gateway supports;

1. API Key
2. IAM User signature
3. Custom auth

Custom Auth being a lambda function which manages OAuth or any other authentication mechanism not defined above.

I believe enabling 1) and 2) are just additional variables to pass within the API request so shouldn't be too difficult to do.