The STAC Auth Proxy¹ should be made available via eoAPI CDK. In efforts to conform with the remainder of the eoAPI, it would likely make sense to first support a Lambda runtime within the proxy (developmentseed/stac-auth-proxy#60).