VPC Endpoint "execute-api" needs open CIDR on 10.0.0.0/8

As an OPS I need to have a way to attach a specific SG ID on only one of the Endpoints deployed.

Or create a rule directly on the module for endpoints that needs to be reacheable from outside the VPC CIDR.