Our application uses API Gateway (backed by dotnet AWS Lambda Functions). We use cognito to authenticate and authorize the web users. No problem.
This is for a multiten