application to application Authentication using AWS Application Load balancer

Question

I have an AWS architecture/design issue. I need to authenticate a client application running outside of AWS with a containerised REST API running in Fargate behind AWS ALB.