We can use an NLB to forward TCP requests to the ENI (IP address) of VPC endpoint. And the VPC endpoint should be associated with with a private API.

This document introduces how to associate a VPC endpoint with a private API: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-private-api-create.html#associate-private-api-with-vpc-endpoint