I’m using the Serverless framework with AWS to produce a public (authenticated) API. All of the endpoints are exposed via API gateway. I also will need to have internal endpoints for service-to-service communication and I would not like to expose these endpoints to the public. Is there an easy way to create endpoints as part of this project that are not exposed publicly but can only be hit from within our VPC?