Enforce CloudFront-Only Access for AWS API Gateway

How we can secure a AWS API Gateway REST API to accept requests only through CloudFront.