Run ECS Fargate tasks without a public IP using a NAT Gateway

When you create an ECS service with the default networking settings, every task gets its own public IP. Three tasks, three public IPs. Redeploy and you get three new ones. Your security groups are the