Question on upstream url

I am trying to use Kong for my internal services. From the tutorial I have seen for Kong the upstream url is available for public (i can enter the url in address bar and access it). I have few servers running in AWS and they are not exposed to the internet (can be accessed only by logging into the AWS instance). How to I provide the upstream_url for such services?