title: How to secure and restrict user access to an API hosted in AWS Beaskstalk
body: <p>I am looking at hosting an API application in Beanstalk. I want to restrict access to everyone except for one person (tester) then when deploying it in production control who has access to it.</p>
  <p>The API currently uses an API key and the user will need to authorize access but is there a way to restrict anyone finding the endpoint hitting the it. Do I need to look at restricting access via security groups? I will not know the IP address of the users.</p>
  <p>I am potentially not looking at creating IAM access in AWS for this either.</p>