As of now is not possible to use Private Endpoint for Amazon Cognito and I don't know if it will ever be.

I think that the only possible solution is to proxy all the requests to Amazon Cognito using an AWS Private API Gateway.

You can create a private gateway with {proxy+} resource and ANY method, and then in the integration request use an HTTP Integration with the Cognito User Pool domain.