I have an application in AWS, I’m using fargate (ECS) or you can think in EC2, the ideia is the same.

In front of it I have a Loadbalance receiving 443 and my port but both in HTTPs and with my domains exposed to it by route53.
My frontend is HTML in cloudfront (s3) as static and I’m using javascript to access my endpoints.

I have Authorization process to my endpoints but I’m receiving some get request to endoints I don’t have, it is a king of attack I don’t know how to prevent.

What should I do to block it before receive it in my app? And how?

I don’t know if using APIGateway is the solution or other approach is necessary.