When deploying a Serverless with SAM CLI, normally SAM CLI will create an API Gateway instance automatically.

API Gateway has three modes PRIVATE , REGIONAL or EDGE. In a PRIVATE configuration the API gateway is restricted to a IAM resource or a VPC, this article handles a public API gateway which can be REGIONAL or EDGE.

The goal is to restrict a public API Gateway access to a certain IP address.

Continue reading