aws: Application traffic passing through NAT gateways? [closed]
The load balancer should be in the public subnets, and back end in the private subnets should be accepting traffic from the load balancer.
In this scenario, only traffic initiated by the back end would traverse the NAT. If the containers are immutable, you probably do not need the NAT gateways.