1. AWS API Gateway with resource policy：在API Gateway上设置资源策略来限制对API的访问。在这种情况下，API Gateway使用公共网络来公开API并限制访问。以下是资源策略的示例：

{
   "Version":"2012-10-17",
   "Statement":[
      {
         "Effect":"Allow",
         "Principal":"*",
         "Action":"execute-api:Invoke",
         "Resource":"arn:aws:execute-api:us-east-1:123456789012:123abc1234/*/*/*"
      },
      {
         "Effect":"Deny",
         "Principal":"*",
         "Action":"execute-api:Invoke",
         "Resource":"arn:aws:execute-api:us-east-1:123456789012:123abc1234/GET/*/pets"
      }
   ]
}

在上面的资源策略示例中，所有用户都允许调用API，但是对于访问"/pets"资源路径下的GET方法的请求，将被阻止。

2. AWS API Gateway with VPC Endpoint：在API Gateway配置的VPC Endpoint中访问API时，不需要通过公共网络进行访问。以下是配置VPC Endpoint的示例：

resource "aws_vpc_endpoint" "lambda" {
  vpc_id            = "${aws_vpc.myvpc.id}"
  service_name      = "com.amazonaws.${var.region}.execute-api"
  vpc_endpoint_type = "Interface"

  security_group_ids = [
    "${aws_security_group.executionsg.id}",
  ]

  subnet_ids = [
    "${aws_subnet.privatesubnet1.id}",
    "${aws_subnet.privatesubnet2.id}",
  ]
}

resource "aws_api_gateway_rest_api" "example" {
  name = "example-api"
}

resource "aws_api_gateway_resource" "example" {
  rest_api_id = "${aws_api_gateway_rest_api.example.id}"
  parent_id   = "${aws_api_gateway_rest_api.example.root_resource_id}"
  path_part   = "example"
}

resource "aws_api_gateway_method" "