Hazardous (3)
Recommended Mitigation
Set the endpoint type to private in API Gateway, or restrict access it by utilizing Access Policies as described here: <a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies.html" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies.html</a>