cutting a nat bill, the order matters more than any single fix, because the cheap no-downside moves capture most of the money.

s3 + dynamodb gateway endpoints — free, one route-table edit. start here.
interface endpoints for ecr and logs — $0.01/GB, under a quarter of nat's rate. cheap, but do the per-service math.
cross-AZ cleanup, and the honest question of whether the subnet needs nat at all.
fck-nat — real savings, but no default failover and a patching burden. last resort.

most teams never get past step two.

#aws #infrastructure

https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax