title: Respecting an API key with Amazon's API Gateway
body: <p>I'm learning serverless applications. I've created a simple Lambda that I've confirmed is working via Paw/curl.</p>
  
  <p>Next I completed the API Gateway tasks of:</p>
  
  <ul>
  <li>create a POST Resource that requires an API key</li>
  <li>create beta and test Stages</li>
  <li>create the API key</li>
  <li>create a Usage Plan</li>
  <li>associate the API key with the Usage Plan</li>
  <li>associate the Usage Plan with the test Stage</li>
  </ul>
  
  <p>I expect requests with the <code>x-api-key</code> Header to work, and those without to be denied. But I observe all requests continue to successfully finish regardless of that Header's presence.</p>
  
  <p>I've recreated individual API Gateway steps and eventually the process as a whole, to no avail. Any clue of what I've missed?</p>