title: How to authenticate users for AWS API Gateway?
body: <p>I am creating a server less REST API using AWS API Gateway and AWS Lambda. While the end points have been created and linked with the corresponding Lambda functions, next step is to add authentication layer to authenticate users via email and password. From what I could understand from the documentation, API Gateway methods can support either API Key based access or IAM based access. But I could not understand how to securely implement the authentication using API keys. </p>
  
  <p>Will I have to create a server for doing the authentication and managing the users ? Is there any way this can be a complete server less end to end application ? Any resources for pointing in the right direction will be highly appreciated.  I am looking at <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html" rel="noreferrer">this document</a> at the moment</p>