Post

In most cases you'll need to set up ALBs to handle ingress. AWS just announced ECS Gateway, which is an account-level resource that doesn't provision anything until services connect.

ECS sets up the certificate, hostname, target group and a security group that only accepts ALB traffic. You still pay for the resources used, but the gateway itself doesn't have any extra cost. Looking forward to trying this out. Check out this intro from Channy Yun (윤석찬)!