Secure the access to the API gateway that triggers my step function wit api keys

Serverless Framework
1

Looks like the event-configuration of the state machine, e.g.

stateMachines:
    my-workflow:
        events:
        - http:
            path: flow
            method: post
            private: true

ignores the attribute “private: true”

I’m trying to secure the access to the API gateway that triggers my step function with apikeys - isn’t that possible, or am I missing something?

2

Just joined the community and this is obviously late, but for anyone else wondering: