Authorization for API gateway external requests

Question

Currently I have set up an API gateway that external systems will use. What are some good ways which you can handle authorization to the endpoints?

I know API gateway provides keys out of the box but that really doesn't help with the authorization.

Thanks!