Alternatively, you could put all your backend services in the same VPC and add firewall rules so that the microservice is reachable only from within that VPC