I have a public facing website that has a form to submit via Javascript some values to an AWS API Gateway that forwards requests to some Lambda functions. Ideally I'd like to ensure that the submission came from the website and not from a bot.
Is there a way to achieve this without having people to login or install a client certificate?
I know this would not be perfect and a bot can download the page and simulate the click on the website and so on, I just want to disuade bored script kiddies, not to create a fully secure system.
Is there any alternative?