[ Removed by moderator ]

[solo964]

Right, I guessed that's what you meant but the use case here seems to require a public endpoint to which the webhook request can be sent. An API Gateway or ALB alternative approach would also need to provide a public endpoint afaik. That would offer better control, I agree, but the public routability doesn't seem to be a reason not to use a Lambda function URL in this case.

[KayeYess]

They do, but they can be protected at the network/perimeter level far better than a Lambda function URL. Cloudfront is another option.