Connect ECS Fargate Service/Task from public

Question

I have a service in my ECS Cluster.
Sample http://test-svc.dev.myapp.local:8082

I created this Service with assignPublicIp: true

In the service description I have:
Auto-assign public IP
Turned on

How I now connect to this service from outside?

re:Post Agent · Accepted Answer

To connect to your ECS Fargate service from outside, you need to follow these steps:

1. Ensure your ECS service is deployed in a public subnet with the "Auto-assign public IP" option enabled, which you've already done.

2. Make sure the security group associated with your ECS tasks allows inbound traffic on port 8082 from the IP ranges you want to allow access from.

3. Check that the Network Access Control List (NACL) for your subnet allows both inbound and outbound traffic on the necessary ports.

4. Find the public IP address assigned to your Fargate task. You can do this by:
- Opening the Amazon ECS console
- Navigating to your cluster
- Selecting the service you created
- Going to the Tasks tab
- Choosing the running task
- In the Configuration section, look for the Public IP

5. Once you have the public IP, you can access your service using:
http://[public-ip]:8082

Remember that the public IP may change if your task is stopped and restarted. For a more stable solution, consider using an Application Load Balancer (ALB) in front of your ECS service. This would provide a fixed DNS name for accessing your service and allow for better scalability and management of incoming traffic.  
**Sources**  
[Access ECS Service from outside ECS (Public internet) | AWS re:Post](https://repost.aws/questions/QUNoP29Ar_Rs2-QXBDdn-i6A/access-ecs-service-from-outside-ecs-public-internet)  
[Learn how to create an Amazon ECS Linux task for the Fargate launch type - Amazon Elastic Container Service](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/getting-started-fargate.html)  
[Learn how to create an Amazon ECS Windows task for the Fargate launch type - Amazon Elastic Container Service](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/Windows_fargate-getting_started.html)

Adeleke Adebowale J · Answer

In summary, to connect to your ECS service from outside:

Ensure Public IP is assigned to your ECS tasks (which you've already done).
Check security group settings to allow inbound traffic on port 8082 from the required IP range (e.g., 0.0.0.0/0 for full external access).
Ensure the task is running in a public subnet with an internet gateway.
Find the public IP of the ECS task in the ECS console and access the service via http://:8082.
Alternatively, you can expose the service through an Application Load Balancer (ALB) or Network Load Balancer (NLB) for more secure and scalable access.

Connect ECS Fargate Service/Task from public

Relevant content