To securely provide access to VPC-Based AWS Elasticsearch kibana we are using Nginx and cognito with SAML provider

Question

I have VPC-based AWS Elasticsearch Domain, we\'ll call dev. I want this domains to be inaccessible to the open internet, but available in some networks outside the VPC. To that