Application Load Balancer to Amazon API Gateway Private Rest API

Application Load Balancer → VPC Endpoint → API Gateway → AWS Lambda

Cross Account Private API Access via Public Application Load Balancer.

This sample pattern allows users from one account to access their Private REST APIs present in another account over the internet.

This facilitates abstraction of network resources (like load balancers, virtual private clouds, endpoints) & application resources (like lambda, api gateway) into separate individual management accounts.

< Back to all patterns

Language:: Integration
Framework:: Terraform

View this pattern on GitHub

Clone repo

git clone https://github.com/aws-samples/serverless-patterns/cd serverless-patterns/public-alb-private-api-terraform

Deploy

terraform initterraform apply

Testing

See the repo for additional testing notes.

Cleanup

1. Delete the stack: terraform destroy.

2. Confirm the stack has been deleted: terraform show

Additional resources

Tutorial: How to invoke a Private API

Tutorial: How to access Private API in another account

Created by:

Abhishek Agawane

Abhishek is a Security Consultant at Amazon Web Services with more than 9 years of industry experience. He helps organizations architect resilient, secure, and efficient cloud environments, guiding them through complex challenges and large-scale infrastructure transformations. He has helped numerous organizations enhance their cloud operations through targeted optimizations, robust architectures, and best-practice implementations.