How to:
- create a Docker-based AWS Fargate/ECS deployment
- without the Docker containers having a public IP
- with an Application Load Balancer as reverse proxy / SSL termination proxy sitting in front of the containers
For Fargate/ECS to be able to access your Docker images hosted on ECR (or somewhere else) you'll have to allow outbound internet access to the Fargate subnets. Here's how you do it.