I've set up an Application Load Balancer that points to a Fargate Cluster's service (via a target group). I'm using a security group for both the ALB and the service. When I specify specific IP addresses, the TG health checks fail. It works fine when I include the TG health checker's IPs (2 of them), but that's unsustainable for obvious reasons.
I've tried to use 2 different SGs: 1 for the ALB, and the other for the service. The SG has specific IP inbound rules, and the SG for the service allows all inbound traffic (any IP).
Unfortunately, that doesn't work. Does anyone have any suggestions on how to set this up properly?
Thanks in advance!