Shopify App communicating and authenticating with external API (AWS)

Hi all.

I am currently in the process of building an Shopify App for general availability. However I am running into an architectural problem, where I need to communicate with my own API on AWS (REST/GraphQL), which will obviously need to be authenticated with the particular store.

Are there any best practices on how to do this?

Best regards, Marvelous42.