AWS NAT Gateway vs VPC Endpoint Scaler.

## The AWS S3 Egress Trap

If your EC2 containers live securely inside a Private Subnet, they have no public internet access. To fetch files from an Amazon S3 bucket, they must route traffic out through a public NAT Gateway. AWS charges a massive $0.045 per GB penalty for data passing through the NAT Gateway.

By simply modifying your Route Tables to include a **VPC Gateway Endpoint for S3**, your private traffic routes directly to S3 across the internal Amazon backbone, completely bypassing the NAT Gateway and dropping your data transfer bill to $0.00.