Correct Architecture Set Up for a Public and Private API?

I have a monolith that I run on ECS - within this monolith I have a user (public) api and a admin (private) api.

My ECS service sits behind an Internal ALB - if I want the admin api to only be available through a Private API Gateway inside the VPC and the user api to be available through a Public API Gateway outside the VPC - but both have a Cognito authorizer and point to the same Internal ALB - is the diagram attached the correct set up or is there a better way to do this?

Thanks for your help!

Example Architecture

주제

서버리스 프론트엔드 웹 및 모바일 네트워킹 및 콘텐츠 전송 보안, 신원 및 규정 준수

태그

아마존 API 게이트웨이 아마존 Cognito

언어

English

taxmann

질문됨 4달 전1858회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

수락된 답변

This is the correct setup, however, REST APIs do not support VPC Link to ALB. You will need to go via NLB. HTTP API does support connecting to ALB, but you can't make it private. So you will need to change ALB to NLB.

전문가

Uri

답변함 4달 전

전문가

Oleksii Bebych

검토됨 2달 전

taxmann
4달 전
Thank you for your answer Uri, and for clarifying I need to use an NLB - this is so helpful as it's my first time setting it up! :)

Correct Architecture Set Up for a Public and Private API?

관련 콘텐츠