'AWS: how to restrict access to API gateway from Amplify app?

I have an Amplify app which I'd like to be the only one allowed to call an API gateway.

What's the best way to achieve that?

It seems possible to make the gateway private to a single VPC - but it seems like AWS Amplify app can't be placed inside any single VPC.

Are there other ways? Can I whitelist based on arn? IP? Other options?



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source