Amazon API Gateway now supports custom request authorizers allowing you to implement various authorization strategies (e.g., JSON Web token verification) to secure your APIs. Custom request authorizers are implemented as AWS Lambda functions that race code for your authorization strategy implementation.
Source: amazon.com