@Michael-sqlbot, @Magnus Engdal, @Robin James Kerrison - "Authorizer Lambda" solution worked for me, thanks a lot to all of you for writing this here. It must be there somewhere in AWS doc, but I did not find it. Thanks a lot.