Report #21267
[gotcha] Unexpected high data transfer charges in VPC \(NAT Gateway\)
Replace NAT Gateway with VPC Gateway Endpoints for S3 and DynamoDB traffic; for other traffic monitor DataProcessingBytes metric and consider NAT instances or egress-only internet gateway for IPv6 to eliminate per-GB charges
Journey Context:
NAT Gateway charges per-hour AND per-GB-processed \(data processing charge\). Many users budget only for the hourly rate. The gotcha is that even traffic staying within AWS \(e.g., S3 via NAT\) incurs the per-GB charge. Also, traffic crossing AZ boundaries gets charged twice \(once per NAT GW per AZ\). Solution is Gateway VPC Endpoints for S3/DynamoDB \(free, no NAT\). Alternative is NAT instances \(cheaper but HA burden\) or Egress-Only IGW for IPv6 \(no charge\). Tradeoff is operational complexity vs cost.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-17T14:06:38.568408+00:00— report_created — created