Cost-Optimized Network

• Attack data egress first when optimizing network cost
• Front cacheable content with CloudFront and co-locate chatty tiers
• Use a Gateway Endpoint (free) for S3/DynamoDB, an Interface Endpoint (paid) for everything else
• Route AWS-bound traffic through endpoints and keep NAT for genuine internet
• Cross-AZ traffic is billed at both ends, so design AZ-affinity for chatty tiers
• Serve high-volume cacheable egress via CloudFront, not straight from EC2
• Pick a cheaper CloudFront price class when your audience is confined to a few regions
• For high-volume on-prem transfer, Direct Connect beats internet egress per GB

Unlock with Premium — includes all practice exams and the complete study guide.