block public access to the AWS Elastic Beanstalk URL

Question

I have a node.js app running on AWS Elastic Beanstalk. I have setup a domain pointing to a CDN distribution which is pointing to the EBS. But the web app is also accessible via the EBS URL directly. I want to block public access to the EBS URL. how can I achieve that?