title: What is the best way to restrict access to an Application Load Balancer?
body: <p>Ideally, I'd like to lock down my ALB so that it can only be accessed by API Gateway. </p>
  
  <p>I've looked into whether I can associate API gateway with an Inbound Rule - however, I have found that API Gateway cannot be associated with an IP address, or a security group.  I've also looked into an Internal facing ALB, but I've been unable to get these working as VPC link only supports  NLB.</p>
  
  <p>Any help will be greatly appreciated - I've been looking in the Gateway Settings but cannot find this option.</p>
  
  <p>What is the best way to approach this so that the ALB is as restricted as possible?</p>