AWS Network Firewall has introduced two pricing improvements for customers. The service has added the hourly and data processing discounts on NAT Gateways that are service-chained with Network Firewall secondary endpoints. Additionally, AWS Network Firewall has removed additional data processing charges for Advanced Inspection, which enables Transport Layer Security (TLS) inspection of encrypted network traffic.
Previously, NAT Gateway discounts were limited to primary Network Firewall endpoints, and customers paid additional data processing charges when using Advanced Inspection for TLS inspection in select AWS regions. With these improvements, the NAT Gateway discounts now apply when service-chained with both primary and secondary firewall endpoints. Customers also no longer pay the additional data processing charge for Advanced Inspection that ranged from $0.001/GB to $0.009/GB in 13 AWS regions: Middle East (Bahrain), Asia Pacific (Hong Kong), Asia Pacific (Tokyo), Asia Pacific (Osaka), Asia Pacific (Mumbai), EU (Milan), South America (São Paulo), US West (N. California), Africa (Cape Town), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), and Asia Pacific (Melbourne).
These changes help to reduce costs for architectures that use Network Firewall’s multiple VPC endpoint capability and TLS inspection features. Multiple VPC endpoints allow you to connect 50 VPCs per Availability Zone to a single Network Firewall, helping to reduce operational complexity and lower costs as you protect more VPCs. By removing additional data processing charges when using Advanced Inspection, customers can now implement TLS inspection more cost-effectively across their network security architecture.
These pricing improvements are available in all AWS regions where Network Firewall is offered and are applied automatically to eligible configurations. No action is required from customers.
To learn more, see AWS Network Firewall pricing and the AWS Network Firewall service documentation.
Categories: general:products/aws-network-firewall
Source: Amazon Web Services
Latest Posts
- Durable Objects, Workers – New Asia-Pacific location hints: apac-ne and apac-se

- Durable Objects – Outbound connections keep Durable Objects alive

- (Updated) Upcoming change: Microsoft 365 Apps SAEC and MEC will unify [MC1274325]
![(Updated) Upcoming change: Microsoft 365 Apps SAEC and MEC will unify [MC1274325] 4 pexels mccutcheon 1148998](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Dynamics 365 Customer Service – Policy strictness control for governance rules [MC1397526]
![Dynamics 365 Customer Service - Policy strictness control for governance rules [MC1397526] 5 pexels pixabay 534174](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)



![(Updated) Upcoming change: Microsoft 365 Apps SAEC and MEC will unify [MC1274325] 4 pexels mccutcheon 1148998](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-mccutcheon-1148998-150x150.webp)
![Dynamics 365 Customer Service - Policy strictness control for governance rules [MC1397526] 5 pexels pixabay 534174](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-pixabay-534174-150x150.webp)
