Authenticating a GraphQL API with AWS