https://thedavidpage.pages.dev/tags/ecr/Recent content in ECR on The David PageHugo -- gohugo.ioenThu, 18 Jun 2026 09:00:00 +0700https://thedavidpage.pages.dev/posts/cloud/aws/networking/nat-gateway-s3-gateway-endpoint/Thu, 18 Jun 2026 09:00:00 +0700https://thedavidpage.pages.dev/posts/cloud/aws/networking/nat-gateway-s3-gateway-endpoint/<p><strong>A client&rsquo;s NAT Gateway bill hit a record ~$3,000/month. VPC Flow Logs pointed straight at S3 — except the client swore they barely used S3. Here&rsquo;s what was actually going on.</strong></p> <p>Hi everyone 👋</p> <p>A client came to us about a month after going live with a new system built by a different vendor — one they no longer had a maintenance contract with. Their first full invoice after launch showed a <strong>NAT Gateway bill at a record high, roughly $3,000/month</strong>. Standard architecture on their end: ECS services running in private subnets for security, NAT Gateway for outbound access. Textbook setup on paper — which made a bill that high, right out of the gate, more confusing, not less.</p>