When isPubliclyAccessible is set to FALSE it prevents a domain name from being allocated

When attempting to create a VPC Ingress Connection for an Interface VPC Endpoint, it is required the AppRunner instance have isPubliclyAccessible set to false on the Network Configuration.

But a domain name is never allocated to the new instance after startup (aws console shows a _ link).

This prevents the VPC Ingress Connection from being created with the following error:

Attribute 'ServiceUrl' does not exist.

It is presumed creating a VPC Ingress Connection for a VPC Endpoint is the only way to have another AppRunner access an AppRunner instance (e.g. REST). If there is an alternative, please advise.