[dlhavema]

I think the idea here is that you don't have to set up API gateway anymore to get HTTP/API access to your lambda.

You still can of course but it's one less thing you have to do.

Like another comment said you can expose it through IAM/SDK but then you're getting random permissions credentials whatever out to the world as well.