How can I deny public access to an AWS API gateway while allowing access by only a specific role?

Question

I would like to deny public access to an AWS API Gateway and only allow access when the API is invoked with a specific role. In my test there are two gateways, and one calls the