Building a Private API Gateway to ECS Architecture With VPC Links and ALB

This article walks through a secure AWS architecture that connects API Gateway to ECS Fargate using VPC Links and an internal ALB, eliminating the need for public internet exposure. By leveraging private APIs, VPC endpoints, and tightly scoped security groups, the setup enforces a zero-trust model. The key takeaway is that modern AWS infrastructure can be both simpler and more secure by removing unnecessary components like NAT gateways and external access paths.