Can I create AWS API Gateway and S3 bucket only public to VPN

Question

I have a single page application on S3 and its REST API on AWS API Gateway.

How can I restrict access to the SPA only with a VPN.

I'd like to let the login page not public to the Internet.

Answer 1

There exist a way to allow or block traffic from specific ip address (SourceIp) or from vpc endpoint (SourceVpc) in aws s3 bucket policy. We can specify such conditions to restrict access to s3 bucket.

For more details please visit this link.