VPCs without S3 Gateway Endpoint (NAT data processing costs)

AWSCost optimizationFree planSeverity: mediumaws.vpc

VPCs with a NAT gateway but no S3 endpoint, so S3 traffic pays NAT data processing charges

What LeftSize checks

Find VPCs without S3 Gateway Endpoint (causes unnecessary data transfer costs)

Why it matters

Resources like this keep billing every hour while delivering little or no value, and nobody notices until the invoice arrives.

What you get in the GitHub issue

LeftSize runs this check from a scheduled GitHub Action with a read-only identity in your AWS account and opens one issue per scope, updated on every scan. The issue includes:

  • The affected resources, grouped per subscription, resource group or account and region
  • An estimated monthly cost where pricing data is available
  • Background on why it was flagged and when it is a false positive
  • Step-by-step remediation with safety checks
  • Ready-to-run fix scripts (CLI, PowerShell or Terraform where available)
  • Cost and operational impact of fixing it
  • Snooze, ignore or report a finding with a comment on the issue
Install LeftSizeIncluded in the Free plan.