Hi, I set up the example ECS deployment yesterday ...
# deployment-ecs
j
Hi, I set up the example ECS deployment yesterday which went smoothly. As Dagit is available on port 3000 of the Load Balancer's URL which is public - What is the best way of setting it up so only private access is available?
v
Either put it under a private IP and connect through a VPN or forward the load balancer to AWS Cognito
j
Perfect thanks, that makes sense. It works 🙂 Had to make my own internal load balancer (as dagster makes it's own external one) and reference that in the docker-compose file.
a
We use Cloudflare Tunnel to expose such services. Works like a charm.
Cognito auth on LB should be good choice too (we use it when only a part of service should be protected, and other should be exposed to public)