AWS API Gateway with AWS WAF
Unfortunately no, API Gateway does not provide access to the backing CloudFront distribution. To use WAF you would have to create a second distribution, which is inefficient but should functionally work.
AWS API Gateway recently (around November,2018) added this feature https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html