API Gateway resource policy allowing invocation just from another API

Question

I have 2 API Gateways:

• arn:partition:apigateway:region::/apis/123
• arn:partition:apigateway:region::/apis/456

I want to restrict all type of a