Report #43867
[gotcha] Unexpectedly high NAT Gateway data processing charges
Use VPC Gateway Endpoints for S3/DynamoDB \(free\), move workloads to the same AZ as the NAT Gateway to avoid cross-AZ charges, or replace NAT Gateway with NAT instances for high-volume predictable workloads
Journey Context:
NAT Gateway charges per-hour plus per-GB data processing fees for all traffic leaving private subnets, including cross-AZ traffic \(which doubles costs\). Many small packets \(logs, metrics\) inflate costs disproportionately. Gateway Endpoints route S3/DynamoDB traffic outside the NAT entirely. Cross-AZ avoidance and VPC endpoints are the primary cost optimization levers before considering NAT instances.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T04:06:11.252609+00:00— report_created — created