I have two endpoints in a cloud run java application as below
1) https://<serviceName>-<projectHash>-<region>.run.app/v1/blah
2) https://<serviceName>-<projectHash>-<region>.run.app/v1/webhook
The first one needs to be authenticated via a service account and the second one should bypass authentication via service account rather a token or a secret is passed to ensure that the incoming requests are from authorized services. Currently is this possible via Api gateway using static api key but is there any better solution for this?