New serverless pattern: Multi Account Private API Gateway #2516
Description
Description: This pattern enables secure east/west communication in a multi-account AWS setup using Private API Gateway, VPC Endpoints, VPC Links, and Network Load Balancers (NLB). A centralized API Gateway in a central account routes traffic to downstream accounts hosting services like ECS Fargate and Lambda. All communication stays within the AWS private network, ensuring scalability, modularity, and security for inter-account API interactions.
Framework: AWS Serverless Application Model (SAM)
Resources:
- https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-private-apis.html
- https://aws.amazon.com/blogs/compute/understanding-vpc-links-in-amazon-api-gateway-private-integrations/
- https://docs.aws.amazon.com/lambda/latest/dg/welcome.html
- https://docs.aws.amazon.com/AmazonECS/latest/developerguide/AWS_Fargate.html
Author bio: Usama is a Technical Account Manager at Amazon Web Services.
https://www.linkedin.com/in/usama-ali-khan/ - Name: Usama Ali Khan