Report #52334
[gotcha] AWS NAT Gateway generating $100\+ monthly charges with zero data transfer
Consolidate to a single AZ NAT Gateway \(accepting cross-AZ traffic costs\) if high availability is not critical; otherwise replace with VPC Endpoints \(PrivateLink\) for S3/DynamoDB to bypass NAT entirely, or use AWS PrivateLink interface endpoints for other services
Journey Context:
NAT Gateway pricing has two components: hourly rate per gateway \(~$0.045/hour\) and data processing \(~$0.045/GB\). Unlike EC2 which is pay-per-use \(stopped instances bill only for storage\), NAT Gateway bills the hourly rate continuously from creation to deletion. A common HA pattern deploys one NAT per AZ \(3 AZs = ~$98/month\) regardless of traffic. Furthermore, data crossing AZ boundaries to reach a NAT in another AZ incurs both NAT processing fees AND cross-AZ data transfer fees \($0.01/GB\). Most cost calculators assume NAT is usage-based like Lambda, leading to 10x budget surprises.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T18:20:11.681871+00:00— report_created — created