AWS Launches Amazon ECS Gateway for Managed Ingress Networking

• AWS announces Amazon ECS Gateway, a fully-managed ingress solution that dynamically provisions and manages Application Load Balancers (ALBs), ACM certificates, and security groups for ECS services.
• Platform teams define organizational networking standards (subnets, TLS, WAF) in a single gateway resource, while application teams opt in via a gateway connector parameter, eliminating per-service manual configuration.
• Up to 25 services can share a single ALB to optimize costs, with ECS automatically scaling ALB capacity and assigning unique DNS hostnames to each service.
• Available now in all commercial AWS Regions where ECS is supported at no additional charge, with costs limited to the underlying infrastructure resources provisioned in the user's account.

Configuration and Limits

• A gateway can be associated with up to 10,000 clusters, and a single cluster supports up to five gateway associations.
• The default quota limit for maxAlbCount is 10; deployments fail if this limit is reached and no existing ALB has available capacity.
• Requires awsvpc network mode and works across Amazon ECS EC2, AWS Fargate, and ECS Managed Instances.

Operational Behavior

• ECS re-evaluates gateway associations on every deployment, automatically connecting or disconnecting services based on current cluster state.
• Service deletion triggers automatic cleanup of all gateway routes and per-service resources, deprovisioning the ALB if it was the last route holder.