Here's a simplified view of my situation:
I have two lambda functions (A and B). Function A invokes Function B for some of its processing.
I'm looking for some way to have Function B be capable of understanding that it is Function A making the call, in a secure and "most simple" way. In other words; Function B is exposed to the internet via an API Gateway, but how can I ensure that invocations are made by a trusted party?
My key-word here is "Simple"; of course, I could generate API keys and store those in Dynamo or whatever, but that feels needlessly complex when I'd be perfectly happy just knowing "Hey, this request was made by LambdaRole123". where LambdaRole123 is the role that Func