Amazon API Gateway
Developer Guide

Using Tags to Control Access to a REST API in API Gateway

Permission to access REST APIs can be fine-tuned using tag-based access control in IAM policies.

For more information, see Using Tags to Control Access to API Gateway Resources.