We use a combination of Lambda, ECS (for slightly larger services), and Heroku to host them. And, we use Mashape's Kong in front of them for authentication / authorization, and logging (see https://blog.arachnys.com/how-we-solved-load-testing-scalabi...). We found it far easier to configure than API Gateway.