I need to assign a client certificate to the API endpoint via serverless.yml.
I can create the client certificate in AWS. I just need to know how to attach in the serverless.yml when defining the function.
Replying to my own question 
I ended up writing a plugin to do this.