How is the alert manager connecting to the query service on port 8085 when port 8085 is not exposed by the query service? If I am hosting them as a separate service how can they communicate with each other?

@Kshitij Gang It is the internal port of query-service. The communication happens within the specific docker network. Hence, no need to expose the port to host machine or elsewhere.

I am trying to deploy signoz on ecs using copilot, so I can expose only one port on the query service so can the alert manager communicate over the 8080 port too or does the private port has exposed only specific routes?

both 8080 and 8085 ports of query-service should be exposed (not necessarily over public internet but internally).