How to protectect GraphQL endpoint for AMS 6.5

Hi everyone,

We are unsure on how to protect GraphQL endpoint when using AMS(Managed services) 6.5 version. We followed adobe documentation to see how to generate the access token which will be used by a third party app to hit our graphQL endpoint but it seems that it only applies to AEMaaCS https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/implementing/developing/generating-access-tokens-for-server-side-apis.html?lang=en. I have access to cloud manager but i dont see the three dots(more options). Check the picture below.

We know that published graphQL endpoint is accessible to everyone by default but we would like to protect it.

Is there a way that we can protect the endpoint using a token just like the documentation says but for AMS 6.5 or are we only left with basic auth option?

Hope you are all doing well and thanks in advance.

Best Regards