I\'m having hard times adding instances that are created in my VPC and on a private subnet(no internet gateway attached to it) to ECS cluster.
Right now the only way I\
I Was also trying to block public requests to the ECS instances by deploying the cluster into a private subnet, and later found out I need a NAT server/gateway, which costs about 1 dollar a day.
If you just want to block the dodgy sniffing requests to your ECS instances, you can update the security group for your ECS instances while keeping them in a public subnet. That will save you $30/day.