How to configure api gateway for a service deployed on a private subnet?

Question

I deployed the web service on my private subnet without ELB on the public subnet.

Now I want to publish it publicly. Can I use the API gateway as an http proxy

to make it publicly available?

Does anyone know how to do this?

Answer 1

The service must be publicly available for the API gateway in order to be able to connect to it. You can use SSL Client certificates to restrict access only to the Gateway API. Otherwise, the Gateway API will not be a good solution to your problem.

Answer 2

In addition to @Mark B's excellent answer, you can also consider using the Lambda function as a proxy.

API Gateway → Lambda → ELB

You can configure Lambda to access VPC resources . Lambda would have to fully load the entire result before returning it, so this will slow down the big answers.