text: **Protect your API**
  
  To authenticate and authorize access to your Rest APIs, you can choose from the following: 
  
  • Amazon Cognito user pools as an identity source for who access the API. 
  
  • Lambda functions to control access to APIs by using a variety of identity sources. 
  
  • Resource-based policies to allow or deny speciﬁed access from source IP addresses or VPC 
  
  endpoints. 
  
  • AWS Identity and Access Management roles, policies, and IAM tags to control access for who can 
  
  invoke certain APIs. 