A company uses Amazon API Gateway to expose a set of APIs to customers.

Ask the customers to use AWS credentials to call the InvalidateCache API operation.

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to send a request that contains the HTTP header when they make an API call.

Ask the customers to use the AWS SDK API Gateway class to invoke the InvalidateCache API operation.

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to add the INVALIDATE_CACHE query string parameter when they make an API call.