Description

API Gateway {AwsApiGatewayEndpoint} is publicly accessible. API Gateways should only be accessible from known sources in order to prevent unauthorized access

• 

  Recommended Mitigation

  Set the endpoint type to private in API Gateway, or restrict access it by utilizing Access Policies as described here: <a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies.html" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies.html</a>