Can we Use Api keys with AWS API Gateway

Question

Can we use api-keys for authorization and grouping users so that we can access the api's in API Gateway. I wish to send requests using will be sent from web-page using javascript calls. I have following question too

1. Can we encrypt the api-keys?
2. Is it beneficial to encrypt them?
3. Is there any better way?

Answer 1

There is no getting away here. When your API calls are initiated from client there has to be an authorization.  Thus there will be no point of encrypting them. You will need a authorization provider to that for you ie return API key in response.