1. Home
  2. Articles
  3. Guide

Guide

AWS data transfer costs, explained

Data transfer is the line on an AWS bill that nobody planned for. Most of it comes from a few patterns, and each has a known fix.

  • By Anwar Alawad
  • Updated 1 October 2026
  • Read 6 min
01 · The map

Where the charges come from

TrafficCharged?Notes
Into AWS from the internetNo
Out of AWS to the internetYes, per GBAWS includes a monthly free allowance across services
Between Availability Zones in a regionYes, in both directionsEach gigabyte is charged when it leaves one zone and again when it arrives in the other
Within one Availability Zone, over private IPsUsually no
Between regionsYes, per GB
Through a NAT GatewayYes, a processing charge per GBOn top of any transfer charge. See NAT Gateway costs.
From an AWS origin to CloudFrontNoYou pay for CloudFront’s delivery to viewers instead
02 · Patterns

The patterns behind a big bill

Chatty services spread across zones

Spreading services across Availability Zones is right for resilience, but a service that makes many calls to another service in a different zone pays for every gigabyte twice. Keep the heaviest conversations in the same zone where you can, for example by routing to zone-local replicas or instances.

Serving files straight from S3 or a load balancer

Put CloudFront in front. Transfer from an AWS origin to CloudFront is free, and CloudFront caches repeated downloads close to users.

Replicating data between regions

Cross-region replication, backups and disaster-recovery copies all transfer data. Check they copy what you need, as often as you need it, and nothing more.

Private traffic going the long way

Workloads that reach S3 or DynamoDB through a NAT Gateway pay transfer and processing charges that a free gateway endpoint would avoid.

03 · Diagnosis

Finding it in the bill

  1. In Cost Explorer, filter the service to EC2 (where most transfer charges land) and group by usage type. Transfer usage types include DataTransfer in their names, and NAT processing includes NatGateway.
  2. Look at regional transfer (between zones) separately from transfer out to the internet. They have different causes and different fixes.
  3. For the biggest line, use VPC Flow Logs to find which workloads send the traffic and where it goes.
04 · Sources

Sources

See also Lower cloud costs.

Next step

Not sure where your data transfer comes from?

On a 30-minute call we’ll look at your bill and point to the traffic behind it.