I am attempting to follow the "API Gateway resource policy only" flow on this doc: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-authorizatio