title: AWS ECS get public certificates for internal backend communication
body: <p>Consider following scenario: Some container running in the backend, e.g. on AWS Fargate or ECS, and the communication between the container and the communication to other backend componets (e.g. AWS API Gateway) should be TLS encrypted. Since not all compontents accept self signed certificates (e.g. AWS API Gateway), public certificates should be used for the container.</p>
  <p>What is the best way to obtain public certificates for such internal backend communications use cases in terms of costs and validity time (one year or longer).</p>
  <p>As far as I know, AWS issued certificates do not work because these certificates can only be used on load balancer or API GW, but not in container running on ECS/Fargate.</p>