Should not even use Lambdas. Lambdas are NOT API's; they lack the ability to call other endpoints like a normal API and require a wrapper to have even 3/4 the functionality of a normal api.

And even when benchmarking a FREE TIER (with JWT & RBAC) vs Lambdas with NO SECURITY, you get better performance https://medium.com/@apiexpert/broken-lambdas-apis-cannot-call-api-s-8e7b86a7418e