From Dev.to
Stop Paying AWS to Talk to Itself: When to Use VPC Endpoints Instead of a NAT Gateway
If you’re running EC2 instances or Lambda functions in private subnets, they may still need to reach services such as Amazon S3, Amazon ECR, and Amazon CloudWatch. A common setup sends that traffic th...