Important milestone this morning: managed to set up an AWS API Gateway endpoint with a Lambda authorizer and a Lambda implementation without resorting to a tantrum. I think I know how it all works now.
Famous last words.
Update I thought I knew how it all worked until I decided to automate the whole thing with Terraform. I know nothing.