Block creating public API Gateway endpoints

In that case the best way to do it is using AWS Config. Create custom AWS Config Rule if not already present to trigger a lambda function on creation or modification of APIGateway endpoint. Test the conditions in Lambda and take an action to either delete the endpoint and modify it to private.