Traffic from Shared services account to Elastic beanstalk?
Hi, I don't want to expose my elasticbeanstalk web application directly from the AWS account it is hosted in, I have a landing zone and a dedicated network account for ingress/egress. I want to host the ALB in my network account and share my TGW using RAM in the elasticbeanstalk account, But not sure how external traffic will be able to reach my elastic beanstalk env.
Shall I add internal ALB in front of elasticbeankstalk because I need end to end SSL also.
- 新しい順
- 投票が多い順
- コメントが多い順
Hi,
Yes, you need to add internal ALB. You will route traffic from your TGW to it but also have HA and horizontal scaling for your application. There are many examples available on how to add a centralised firewall with TGW and a separate network account, you can follow them to understand the traffic flow for your ingress. https://medium.com/@deepikakhalarka/traffic-patterns-with-centralized-inspection-using-firewall-appliances-aws-cloud-23cbec8f4b78
関連するコンテンツ
AWS公式更新しました 10ヶ月前- AWS公式更新しました 8ヶ月前
- AWS公式更新しました 4年前
