Misconfigured private API

API Gateway supports private API which can only be accessed through VPC endpoints. While creating such APIs, special care should be taken while writing out the resource policy as one misconfiguration can allow anyone to interact with the API.

Objective: Interact with the private API and retrieve the flag.