Correct Architecture Set Up for a Public and Private API?

Question

I have a monolith that I run on ECS - within this monolith I have a user (public) api and a admin (private) api.

My ECS service sits behind an Internal ALB - if I want the admin api to only be available through a Private API Gateway inside the VPC and the user api to be available through a Public API Gateway outside the VPC - but both have a Cognito authorizer and point to the same Internal ALB - is the diagram attached the correct set up or is there a better way to do this?

Thanks for your help!

[Example Architecture](/media/postImages/original/IMF66cxmHBRe-9t2Zu2C6oFQ)

Accepted Answer

This is the correct setup, however, REST APIs do not support VPC Link to ALB. You will need to go via NLB. HTTP API does support connecting to ALB, but you can't make it private. So you will need to change ALB to NLB.

Correct Architecture Set Up for a Public and Private API?

Relevanter Inhalt