Function administrators may want to secure evaluation functions from unwanted invocations by external parties. While AWS Lambda provides an authentication mechanism using API keys in API Gateway, other deployment platforms may not provide such functionality.
Shimmy should be able to provide (optional) authentication using a basic API_KEY header, which can be provided using environment variables.