I am trying to create a lambda service on AWS and have it accessed from outside via the API gateway with no authentication or restriction required.
To make things ea
This may be far from obvious, but another reason of seeing "Forbidden" error when using AWS API Gateway may be calling incorrect URL that does not correspond to any deployed API method. It can occur if you're actually hitting wrong URL (e.g. instead of calling https://9999xx9x99.execute-api.us-east-1.amazonaws.com/dev/users
(note dev
stage before users
) you called https://9999xx9x99.execute-api.us-east-1.amazonaws.com/users
(no stage). You'd expect to get 404, but you'll get 403.
BTW: after you make a deployement to https://9999xx9x99.execute-api.us-east-1.amazonaws.com/dev/users
calling https://9999xx9x99.execute-api.us-east-1.amazonaws.com/user
(note singular noun form here) you'll get… 403 as well, but with "Missing Authentication Token" message!