Writing an AWS custom authorizer to enable the use of Netlify Identity on AWS Lambda

We have a GraphQL service deployed but the service was moved from Netlify Functions to AWS Lambda. AWS Lambda doesn't do the same magic that Netlify Identity+Functions did for us, so we have to explore the GoTrue API, figure out which endpoints to hit, write an AWS custom authorizer, and make sure the authorizer will run before our lambda function.