Run an Amazon ECS task on Fargate in a private subnet using NAT gateway

You can run Fargate tasks in private subnets. However, based on your use case, you might require internet access for certain operations, such as pulling an image from a public repository. If you need your task to access the internet from a private subnet, grant internet access using a NAT Gateway. The required endpoints are accessed over the public IP address of the NAT gateway.
Reference: aws.amazon.com...

[@treyhannam3806]

well done, thank you! It was nice to see how the NAT gateway should be setup and what errors you run into if you set it up wrong/ do not have it

[@t-distributedkid3825]

I was struggling with my tasks being stuck in Provisioning state.
Finally found this awesome video
Thanks a lot

[@charlyloc250]

For cost savings it's better to use vpc endpoints for retrieving ECR images when you launch ECS tasks in a private subnet. The thing is that you have a little bit more work to do to set that.

[@raaviblog105]

There is another video explaining how to setup WITHOUT NAT gateway - ua-cam.com/video/AyFiJqoulpY/v-deo.html

[@charlyloc250]

I just saw it, it's awesome thank you!

[@leonardotumadjian35]

Thank you for your video! it helped me a lot to understand how to link de NAT Gatway to the outside!

[@shahbazahmad9999]

how to SSH into above conatiner. because it is running on private subnet so how can achieve this.

[@jayendrasathiyamoorthy5633]

I deployed fargate task in private subnet with NAT gateway for whitelisting purpose. Even though I attached load balancer but I can't able to access the task from internet. So what can I do for that?

[@alexandrucomanescu9857]

Thank you for the video!

[@wrohanar]

how to add the public ip which is static to ECS

[@victorshelepen6489]

Thank you. I'm going to be dealing such an issue. But why did you use Internet gateways or Egress-only internet gateways? On my side, these two do not work. I am trying your variant.

[@raaviblog105]

Sorry for delayed reply...from private subnet, its safe to use NAT gateway (one way access to internet). OR you can setup VPC endpoints (if do not want NAT gateway).

[@tejasnb11i]

Hi, thanks a lot for this video...
When I'm trying to create a new cluster it is not asking me to select vpc, networking option itself is not there... why it is?

[@jayendrasathiyamoorthy5633]

Because the console has been updated recently. If you create a service in the cluster, there you can select your networking configurations.😊

[@nadunovitigla109]

Thank You Sir

[@raaviblog105]

Most welcome

[@sagarhm2237]

how to acces it throgh internal load balancer

[@harsh007301]

Thanks for this awesome video. So we need NAT gateway only if we want to make outbound calls to third party Rest APIs, else it will work fine with VPC endpoints if we only want to connect S3 and ECR. right?

[@raaviblog105]

Yes, correct