Amazon API Gateway Now Supports Enhanced Request Authorizers

You can now pass information to your Amazon API Gateway custom authorizers via request parameters including headers, paths, query strings, stage variables, or context variables. An API Gateway custom authorizer is an AWS Lambda function that you provide to control access to your APIs using bearer token authentication strategies, such as OAuth or SAML.  
Quelle: aws.amazon.com