Route two different AWS ECS/Fargate container ports (80 & 443) via two different Network Load Balancer Target Groups with AWS CDKv2

snippet.cs

var myService = new FargateService(this, "MyService", new FargateServiceProps {
    Cluster = myCluster,
    DesiredCount = 2,
    AssignPublicIp = true,
    TaskDefinition = myTaskDef,
    EnableExecuteCommand = true,
});

targetGroupPort80.AddTarget(new [] {
    service.LoadBalancerTarget(new LoadBalancerTargetOptions {
        ContainerName = myContainer.ContainerName,
        ContainerPort = 80,
        Protocol = Protocol.TCP
    }) 
});

service.Connections.SecurityGroups[0].AddIngressRule(
    Peer.Ipv4(myVpc.VpcCidrBlock),
    Port.Tcp(80),
    "Allow NLB traffic from VPC CIDR to port 80 Target Group"
);

targetGroupPort443.AddTarget(new [] {
    service.LoadBalancerTarget(new LoadBalancerTargetOptions {
        ContainerName = myContainer.ContainerName,
        ContainerPort = 443,
        Protocol = Protocol.TCP
    })
});

myService.Connections.SecurityGroups[0].AddIngressRule(
    Peer.Ipv4(myVpc.VpcCidrBlock),
    Port.Tcp(443),
    "Allow NLB traffic from VPC CIDR to port 443 Target Group"

Ref: aws/aws-cdk#1490
Ref: aws/aws-cdk#3667