Good point, if you do authentication in your code manually (like verifying a JWT issued by Cognito) you could also directly invoke the Lambda from your client a

Good point, if you do authentication in your code manually (like verifying a JWT issued by Cognito) you could also directly invoke the Lambda from your client and completely forgo ALB saving even more money (at the cost of slightly increased complexity, that is).