Custom Auth via Kong

Hello, Kong Community
We are operating a SaaS API service. Currently we are performing API authentication through app id and api key.
AppID: api-${APP_ID} # There is an app id in the user domain, so we parse it.
ApiKey: HTTP Header x-api-key: ${API_KEY}
App ID and API Key are matched 1:N.
Can I use Kong’s native function or use Kong Plugin to perform authentication using these two?

Thank you