title: Is it possible to restrict the AppSync API endpoint to in network only?
body: <p>I'm currently building an AppSync API and will be implementing Cognito Pools for authorization. I noticed that there is an endpoint created upon building an AppSync API. It looks like with API Gateway, you can restrict public access to the endpoint using a VPC. Is there something similar that is available with AppSync so that the endpoint exposed is not accessible to the public?</p>
  
  <p><a href="https://aws.amazon.com/about-aws/whats-new/2017/11/amazon-api-gateway-supports-endpoint-integrations-with-private-vpcs/" rel="nofollow noreferrer">https://aws.amazon.com/about-aws/whats-new/2017/11/amazon-api-gateway-supports-endpoint-integrations-with-private-vpcs/</a></p>
  
  <p>One thought is to attach the AppSync url to a custom domain that is not public. Is that feasible?</p>