Status: IN
API Gateway Lambda authorizers support two authorization modes: token-based (bearer token) and request-parameter-based (headers, paths, query strings, stage variables, context variables).
Source: entries/2026/03/11/apigateway-latest-developerguide-apigateway-control-access-to-apihtml.md