The gateway is described by principal developer advocate Channy Yun as: a new account-level resource that simplifies ingress networking for containerized workloads by dynamically provisioning and managing the necessary infrastructure on your behalf, with all resources created directly in your account. It is available in all commercial regions where ECS runs, at no extra charge beyond the resources it provisions. The first question practitioners asked was how to put their own domain in front of it.
The split it introduces is organizational. Platform teams create a gateway with an infrastructure IAM role, subnets, security groups, TLS certificates, listener settings, and optional WAF web ACLs, then associate it with clusters.
