One option is to IP whitelist. Limit traffic to your target to requests coming from Apigee. Brainstorming more options...
I think you're talking about the link that is labeled "4" in this diagram:
Mutual TLS is the preferred way to secure this link!
This is described here.