Allow request from API Gateway to private ALB

0
votes

I have a public API gateway set up, I want to forward the requests from API Gateway to a private ALB in the VPC. On AWS Console, for API Gateway VPC link setup I could only select an NLB in the VPC.

  1. Is there a reason why we can only route to NLB and not to ALB?
  2. Is there a way I can route to private ALB from the API Gateway?
2
amazon-web-servicesaws-api-gatewayamazon-vpcaws-elbaws-alb

2 Answers

1
votes

Currently AWS only supports connecting to NLB for VPC link integrations. They have a feature request in place to enable support for ALB as well. For now, you can do -

Public API --> VPC Link --> NLB --> ALB

In the target groups of the NLB, add the private IPs of the ALB. This way you can reap benefits of the NLB (TCP layer) and ALB (HTTPS).

Using static IP addresses for Application Load Balancers

0
votes

The selected answer is outdated. It is possible to have API Gateway integrate, thorugh http, with an internal facing ALB by using VPC Link and private resource integration.

For step by step details, see my answer on another question: https://stackoverflow.com/a/67413951/2948212