Supposedly the Lambda is exposed through an AWS API Gateway.
One reason why you'd get 403 on a fresh "no authentication" API Gateway resource is because you haven't yet deployed your changes.
In API Gateway Console click the Actions dropdown and select Deploy API.