{"id":1052,"date":"2020-11-21T12:54:53","date_gmt":"2020-11-21T12:54:53","guid":{"rendered":"https:\/\/www.easydeploy.io\/blog\/?p=1052"},"modified":"2022-09-22T07:27:26","modified_gmt":"2022-09-22T06:27:26","slug":"how-to-create-private-link-for-ecr-to-ecs-containers-to-save-nat-gatewayec2-other-charges","status":"publish","type":"post","link":"https:\/\/www.easydeploy.io\/blog\/how-to-create-private-link-for-ecr-to-ecs-containers-to-save-nat-gatewayec2-other-charges\/","title":{"rendered":"How to create private link for ECR to ECS containers to reduce NAT gateway(EC2-Other) charges"},"content":{"rendered":"

Introduction<\/h1>\n

A VPC endpoint is the service providing by AWS that\u00a0 enables us to establish private and secure\u00a0 connections between your VPC and AWS services and VPC endpoint is the service powered by AWS PrivateLink. Either\u00a0 Internet gateway, VPN connection , NAT device, or AWS Direct Connect connection is required by VPC endpoint. Public IP is not required by instance to use the VPC endpoint service i.e Traffic between services\u00a0 and your VPC\u00a0 does not leave the Amazon network. In this blog we shall see about creating VPC endpoints for downloading images from AWS ECR to deploy containers in AWS ECS through the private link.<\/p>\n

 <\/p>\n

Reason for implementing VPC endpoint<\/p>\n

    \n
  1. When we are having our custom VPC and launching resources in private subnets we need NAT gateway for those resources in private subnets to communicate with the internet.<\/li>\n
  2. In such scenarios AWS charges NAT based on the amount of data that transfered via NAT.<\/li>\n
  3. When you are deploying containers in private subnets you might deploy the container frequently where you need to pull the images from ECR frequently in such cases the data transferred via NAT will be more and AWS will charge you more.<\/li>\n
  4. Let me give the AWS cost bar for transferring data over internet for clear understanding.<\/li>\n<\/ol>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    Note<\/strong>: Look at your EC2-other cost. Here we are pulling images for ECS over the internet.<\/p>\n

      \n
    1. Once you implement VPC endpoints and the images are pulled through endpoints you can reduce the cost that you can find at the end of the blog.<\/li>\n
    2. Now we shall look into how to create VPC endpoints for our resources to use private link.<\/li>\n<\/ol>\n

      Considerations for Amazon ECR VPC endpoints<\/p>\n

      Prerequisites:<\/h4>\n