question: start_http_server - how to prevent it from accepting external connection?

As part of our InfoSec hardening requirement, we need to make sure this REST server does NOT accept any connection from an external IP other than internally from within the same host. Is there a parameter we can pass in or anything we could to do to make sure of this?

thanks