title: Disable AWS Api Gateway http --> https 307 redirect
body: <p>By default, Api Gateway reponds with a 307 redirect to any unsecure http request. I'm fine with http being disallowed, but my security concern is that http libraries will transparently follow the redirect and developers would not even notice that they sent their sensitive header values (an api token) unsecured.
  Rather than a redirect, I'd rather Api Gateway responded with a 403 Forbidden or something like that, so developers know they should stop sending their tokens over http. Is this possible?</p>