title: What's the best flow for AWS guest only app
body: <p>I'm trying to build a simple card game where one sets his nickname and is able to play with other players.</p>
  <p>I have a few API Gateway HTTP endpoints and while I want only guests too access this app, I only want guest coming from my application to be able to access it.</p>
  <p>I'm not sure if it's possible (pretty new at aws &amp; general security.
  Currently I have only guest identity pools but I'm not sure how to attach an guest authoriser to the api gateway.</p>
  <p>My question is what is the best flow for this, how should I go about it, should I just create user pools? (I'd prefer not to)</p>