AWS Network and Data Transfer Cost Guide
Start with a calculator if you need a first-pass estimate, then use this guide to validate the assumptions and catch the billing traps.
If you searched for AWS data transfer cost calculator or AWS data transfer pricing calculator, the first move is to decide whether you only need transfer out, or the broader AWS network model. AWS networking cost modeling is simpler than it looks if you treat it as a set of consistent line items. This is the AWS networking budgeting parent page.
Stay here when NAT, endpoints, PrivateLink, cross-AZ, cross-region, and internet egress still need to be separated as one AWS system. Go back to the networking parent page if the broader cross-provider networking model is still unclear.
Use this page when "AWS data transfer" is bigger than one line item
- Use the egress calculator for a fast internet or boundary-based transfer estimate.
- Use this guide when NAT, VPC endpoints, cross-AZ, and cross-region paths all matter.
- Use the network calculators once you know which traffic path is causing the bill.
AWS data transfer vs AWS network cost
- Internet egress: data leaving AWS to users or third-party systems.
- Cross-region transfer: replication, DR, or multi-region traffic.
- Cross-AZ transfer: east-west traffic between Availability Zones.
- NAT processed GB: outbound traffic through NAT Gateways.
- Endpoint and PrivateLink costs: endpoint-hours plus processed GB, where applicable.
The 3 buckets (the mental model)
- NAT Gateway: hourly gateway fees + GB processed.
- VPC endpoints / PrivateLink: endpoint-hours (per AZ) + (sometimes) GB processed.
- Transfer boundaries: cross-AZ, cross-region, and internet egress (depends on architecture).
Core formulas (planning-safe)
- NAT hourly = NAT gateways x hours/month x $/gateway-hour
- NAT traffic = NAT GB processed/month x $/GB processed
- Interface endpoint-hours = endpoints x AZs x hours/month
- Interface endpoint hourly = endpoint-hours x $/endpoint-hour
- Interface endpoint traffic = endpoint GB processed/month x $/GB processed
Break-even workflow (NAT vs endpoints)
- Estimate NAT GB processed today (baseline).
- Identify the share of NAT traffic that is actually to AWS services that can move to endpoints (S3, ECR, STS, etc).
- Model 30% / 60% / 90% traffic moved to endpoints, and compare total monthly cost.
- Validate you didn't accidentally increase cross-AZ/cross-region transfer (common hidden pitfall).
Fast path if the query started as "AWS data transfer calculator"
- Mostly internet transfer? Start with the egress calculator and the main egress guide.
- Mostly replication? Use cross-region transfer modeling first.
- Mostly private-subnet traffic? Check NAT processed GB and endpoint-hour assumptions first.
Move into AWS VPC data transfer only after the broader AWS network system model is clear and the remaining question is the transfer path itself.
Decision table (which lever to pull)
| Symptom | Likely driver | High-leverage fix |
|---|---|---|
| NAT bill dominated by GB processed | Image pulls, updates, large outbound downloads | Move AWS-service traffic to endpoints; cache/package mirrors |
| Endpoint bill higher than expected | 3-AZ deployment + many endpoints | Consolidate endpoints; validate which services need endpoints |
| Cross-AZ transfer surprises | Multi-AZ clients hitting single-AZ backends or LB patterns | Keep traffic AZ-local where possible; validate routing/targets |
Troubleshooting checklist (what to verify)
- Top talkers behind NAT (which destinations drive GB processed)
- AZ locality (client and backend in same AZ?)
- Retries/timeouts during incidents (traffic multiplier)
- Log/monitoring traffic you forgot (steady background costs)
Deep guides (recommended reading order)
Validation checklist
- Validate the primary driver with measured usage from a representative window.
- Confirm units and pricing units (per 10k vs per 1M, GB vs GiB) before trusting the estimate.
- Re-check incident windows: retries/timeouts often multiply cost drivers.