Use an API Gateway Resource Policy to allow access to your APIs only from certain IPs. This is a handy approach for locking down your non…