We are getting 403s (forbidden) from API Gateway when we use a custom domain name (public API). However, if we add the host header to the request which points to the AWS invoke URL it works fine. The customer has stated that this is unsatisfactory as they do not want to pass the host header, which makes sense since it seems pointless using a custom domain name if the host has to be specified.
Therefore, is there a way to make this work without setting the host header? The only header we use currently is for the API key (x-api-key).
For context, the environment consists of a REST API that triggers a Lambda function within a VPC.
Grateful for any support on this, thanks.
