Forbidden by means other than API Gateway.