AWS, Security, Architecture, Authentication, Authorization.
requests are denied. When IAM authorization is enabled, clients must use Signature Version 4 to sign their requests with AWS credentials. API Gateway invokes your API route only if the client has execute-api permission for the route. — AWS documentation AWS IAM ensures that only requests with