Ensure API Gateway endpoint is public or private.