I'm using a custom authenticator (Lambda) to validate Javascript Web Tokens (JWT) for a backend Node.js API on Amazon's API Gateway.
Is there a way to pass the policy generated from Lambda to the backend API through a header? The JWTs contain some information that I want the API backend to access, without having to re-validate the tokens.