AWS Cost Lesson: How a Missing VPC Endpoint Led to $1,000 in Unexpected Charges
By
thecodemonkey
A baker's-dozen of insight crammed into one ring.
Summary
A developer shares a cautionary tale about accidentally incurring $1,000 in AWS charges due to a missing VPC Endpoint configuration. The article explains how data transfers from EC2 instances to S3 were routed through expensive NAT Gateways instead of using the free VPC Endpoint service, resulting in unexpected costs. The author provides technical details about AWS networking, VPC configurations, and lessons learned about monitoring and cost optimization. An update reveals AWS ultimately refunded the charges after understanding the oversight.
Key quotes
· 3 pulledUpdate (January 7, 2026): Good news! AWS ended up refunding the entire amount after we explained what happened. Their support team was surprisingly understanding about our VPC Endpoint oversight.
A cautionary tale about AWS VPC networking, NAT Gateways, and how a missing VPC Endpoint turned our S3 data transfers into an expensive lesson.
I've been using AWS since around 2007. Back then, EC2 storage was entirely ephemeral and stopping an instance meant losing all your data. The platform has come a long way.
You might also wanna read
Why average CPU utilization is a misleading metric for cloud-native applications
The article discusses the pitfalls of relying on average CPU utilization metrics in cloud-native environments, particularly in Kubernetes. I
Agumbe: AI-Powered Workspace Platform for Kubernetes Application Development
Agumbe is a platform that provides AI-powered workspaces for building and running applications on Kubernetes. It helps teams go from idea to
Towlion: Self-Hosted Micro-PaaS for GitHub-Based Application Deployment
Towlion is a self-hosted micro-PaaS (Platform as a Service) that enables developers to deploy full web applications directly from GitHub to
aws-doctor: Open-Source CLI Tool for AWS Security, Cost, and Best Practices Auditing
aws-doctor is an open-source command-line tool written in Golang that performs comprehensive health checks on AWS accounts. It audits securi
Netflix's Simian Army: Testing Cloud Reliability Through Intentional Failures
Netflix discusses their cloud infrastructure reliability strategy called the "Simian Army" - a suite of tools designed to test and improve s
Debugging Envoy Load Balancer Latency with eBPF Zero-Code Instrumentation
The article describes a technical solution for debugging an Envoy Network Load Balancer using eBPF (Extended Berkeley Packet Filter) for zer
