VPC

Terraform module to create AWS VPC resources

Version

Repository

Submodules

flow-logvpc-endpoints

Charged while it exists

These set the floor of the bill. They accrue from the moment they are created, even if nothing uses them.

EC2
aws_eip
An hourly charge per address, whether or not it is attached.
VPC
aws_nat_gateway
An hourly charge per gateway plus every GB processed. One per availability zone multiplies both.

These stay near zero until there is traffic, and are the hardest to predict from source alone.

CloudWatch Logs
aws_cloudwatch_log_group
Per GB ingested, then per GB stored for as long as retention keeps it. Retention set to never expire is the usual surprise.
VPC
aws_flow_log
Per GB of captured traffic. Logging all traffic on a busy VPC is expensive.

These carry no charge of their own, though some of them govern resources that do.