Traffic from Shared services account to Elastic beanstalk?
Hi, I don't want to expose my elasticbeanstalk web application directly from the AWS account it is hosted in, I have a landing zone and a dedicated network account for ingress/egress. I want to host the ALB in my network account and share my TGW using RAM in the elasticbeanstalk account, But not sure how external traffic will be able to reach my elastic beanstalk env.
Shall I add internal ALB in front of elasticbeankstalk because I need end to end SSL also.
- 最新
- 投票最多
- 评论最多
Hi,
Yes, you need to add internal ALB. You will route traffic from your TGW to it but also have HA and horizontal scaling for your application. There are many examples available on how to add a centralised firewall with TGW and a separate network account, you can follow them to understand the traffic flow for your ingress. https://medium.com/@deepikakhalarka/traffic-patterns-with-centralized-inspection-using-firewall-appliances-aws-cloud-23cbec8f4b78
相关内容
AWS 官方已更新 7 个月前- AWS 官方已更新 9 个月前
- AWS 官方已更新 10 个月前
- AWS 官方已更新 2 年前
