The development team at your company specializes in creating serverless solutions using AWS Lambda. Currently, these Lambda functions are invoked by clients through AWS API Gateway, which is openly accessible to anyone. The team lead is seeking a way to control access to these Lambda functions utilizing a third-party authorization mechanism.

As a Developer Associate, which of the following options would you recommend to achieve this objective?