To this question, we use AWS for ECS tasks and configured out AWS with our VPN (had to set a static IP address in the container to connect to the VPN)