For authentication with the API Gateway? We're using a JWT token and a custom lambda authorization package. So the payload is just the same as if I was posting to NetSuite with one extra header item, a X-JWT-AUTHORIZATION key with a token value