title: AWS API Gateway MTLS client auth
body: <p>Everytime I searched for <strong>Mutual Auth over SSL</strong> for <strong>AWS API Gateway</strong> I can only find MTLS between AWS API Gateway and Backend Services. But I'm looking to secure my AWS API Gateway endpoints itself with <strong>MTLS (client auth)</strong>. </p>
  
  <p>For instance, I have a backed service QueryCustomer which I have proxied through AWS API Gateway. Now I can put an SSL Cert on API Gateway but it's usual 1-way SSL. What I want to achieve is to have an MTLS with client auth where the consumer of APIs from AWS API Gateway first have to exchange their public certificates which we configure on the <strong>AWS truststores</strong> and AWS public certificates will be stored on API consumer end as well. </p>
  
  <p>Now during the handshake as with other API Gateways and application servers should there be a property which says something like this AWS API Gateway endpoint '<strong>requires client auth</strong>' so that only if API consumer's public cert is in API Gateway truststore should be authenticated to access the endpoint, otherwise just throw normal SSL handshake error.</p>
  
  <p>Can someone advise if this is achievable on AWS API Gateway?</p>