AWS VPN

AWS Site-to-Site VPN and Accelerated Site-to-Site VPN Connection Pricing

Pricing for 5 Gbps Site-to-Site VPN Connections:

If you create an AWS Site-to-Site VPN 5Gbps connection you are charged for each VPN connection-hour that your connection is provisioned and available. You also incur standard AWS data transfer charges for all data transferred via the VPN connection. If you no longer wish to be charged for VPN 5Gbps connection, simply terminate your VPN 5Gbps connection, using the AWS Management Console, command line interface, or API.

Site-to-Site VPN 5Gbps connection is priced as follows in all AWS Regions where it is supported.

$0.60/hr per 5 Gbps Site-to-Site VPN connection per hour

Pricing for Site-to-Site VPN Concentrator

If you create an AWS Site-to-Site VPN Concentrator you are charged for each VPN Concentrator-hour that your VPN Concentrator is provisioned and available. Additionally, you are also charged for each VPN connection-hour that your VPN connection (via VPN Concentrator) is provisioned and available. You also incur standard AWS data transfer charges for all data transferred via the VPN connection. If you no longer wish to be charged for VPN Concentrator, simply terminate your VPN Concentrator, including VPN connections, using the AWS Management Console, command line interface, or API.

Site-to-Site VPN Concentrator is priced as follows in all AWS Regions where it is supported.

$1.95/hr per Site-to-Site VPN Concentrator per hour

$0.01/hr per Site-to-Site VPN connections per hour for sites connected via VPN Concentrator

Data transfer out on AWS Site-to-Site VPN incurs data transfer out charges that are explained in the EC2 on-demand pricing page.

There are no additional Site-to-Site VPN service-specific charges for enabling Site-to-Site VPN logs. You will incur standard charges for using Amazon CloudWatch service (publishing Site-to-Site VPN logs to CloudWatch).

Pricing for Accelerated Site-to-Site VPN Connections:
If you enable acceleration when creating an AWS Site-to-Site VPN connection to your Amazon VPC, Site-to-Site VPN connection pricing will apply as indicated above. You will also incur hourly charges for two Global Accelerators per VPN connection and Data Transfer Out Premium (DT-Premium) fees. DT-Premium depends on the source (AWS Region) and the destination (the edge location). See the AWS Global Accelerator pricing page. You will not incur any AWS Global Accelerator charges for non-accelerated VPNs.

Public IPv4 address charge

Each Site-to-Site VPN connection uses unique public IPv4 address for the tunnels. You will incur standard public IPv4 address charges on the IPv4 address that will be used for the tunnels. Please visit the public IPv4 address section of the VPC pricing page for more details.

Pricing examples

Pricing example 1: 1.25 Gbps Site-to-Site VPN

You create an AWS Site-to-Site VPN connection to your Amazon VPC using AWS Transit Gateway in US East (Ohio). The connection is active for 30 days, 24 hours a day. You transfer 10 TB in and transfer 5 TB out through this connection.

  • AWS Site-to-Site VPN connection fee: There is an hourly fee for AWS Site-to-Site VPN, while connections are active. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month in connection fees.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachment. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month for 1 attachment.
  • Data transfer out fee: The first 100 GB are free, so you pay for 5020 GB (5 TB = 5120 GB) at $0.09 per GB. You pay $451.80 per month in data transfer out fees.

You pay $523.80 per month for AWS Site-to-Site VPN 1.25 Gbps connection.

Pricing example 2: Accelerated Site-to-Site VPN

You create an Accelerated Site-to-Site VPN connection from your Amazon VPC using AWS Transit Gateway in US East (Ohio) to a remote site in Europe. The connection is active for 30 days, 24 hours a day. You transfer 10 TB in and transfer 5 TB out through this connection.

  • Accelerated Site-to-Site VPN connection fee: There is an hourly fee for Accelerated Site-to-Site VPN, while connections are active. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month in connection fees.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachment. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month for 1 attachment.
  • Data transfer out fee: The first 100 GB are free, so you pay for 5020 GB (5 TB = 5120 GB) at $0.09 per GB. You pay $451.80 per month in data transfer out fees.
  • AWS Global Accelerator hourly fee: You pay hourly for two Global Accelerators for each hour the connection is active. The hourly fee for each Global Accelerator is $0.025, or $0.05 per hour. You pay $36.00 per month in Global Accelerator hourly fees.
  • Accelerated Site-to-Site VPN Data Transfer Premium fee: The fee for VPN Data Transfer Premium is decided by the larger direction of data transfer, in this case 10 TB of data transferred in. The fee is $0.015 per GB for 10 TB of traffic between Regions in America and Europe. You pay $153.60 per month in Accelerated Site-to-Site VPN Data Transfer Premium fees.

You pay $713.40 per month for Accelerated Site-to-Site VPN.

Pricing example 3: High bandwidth connection using 5 Gbps Site-to-Site VPN

You create an AWS Site-to-Site VPN 5Gbps connection to your Amazon VPC using AWS Transit Gateway in US East (Ohio). The connection is active for 30 days, 24 hours a day. You transfer 100 TB in and transfer 50 TB out through this connection.

  • AWS Site-to-Site VPN connection fee: There is an hourly fee for AWS Site-to-Site VPN, while connections are active. For the US East (Ohio) Region, the fee is $0.60 per hour. You pay $432.00 per month in connection fees.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachment. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month for 1 attachment. 
  • Data transfer out fee: The first 100 GB are free, so you pay for 51,100 GB (50TB = 51,200 GB). For the first 10TB, you pay at $0.09 per GB. For the next 40TB, you pay at $0.085 per GB. You pay a total of $4394.20 per month in data transfer out fees.

You pay $4862.20 per month for high bandwidth with AWS Site-to-Site VPN 5 Gbps connection.

Pricing example 4: High bandwidth (5 Gbps) connection using 1.25 Gbps Site-to-Site VPN

You create 4 AWS Site-to-Site VPN 1.25Gbps connection to your Amazon VPC using AWS Transit Gateway in US East (Ohio). To logically bind 4 Site-to-Site VPN connections, you will need 4 AWS Transit Gateway attachments. The connection is active for 30 days, 24 hours a day. You transfer 100 TB in and transfer 50 TB out combined through these connections.

  • AWS Site-to-Site VPN connection fee: There is an hourly fee for AWS Site-to-Site VPN, while connections are active. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $144.00 per month in connection fees for 4 connections.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachments. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $144.00 per month for 4 attachments. 
  • Data transfer out fee: The first 100 GB are free, so you pay for 51,100 GB (50TB = 51,200 GB). For the first 10TB, you pay at $0.09 per GB. For the next 40TB, you pay at $0.085 per GB. You pay a total of $4394.20 per month in data transfer out fees.

You pay $4682.20 per month for high bandwidth with AWS Site-to-Site VPN 1.25 Gbps connection.

Pricing example 5: Site-to-Site VPN Concentrator

You create an AWS Site-to-Site VPN Concentrator and connect it to an AWS Transit Gateway in US East (Ohio). You connect 50 remote sites in North America to access workloads in AWS using this VPN Concentrator. The connection is active for 30 days, 24 hours a day. You transfer 1000 GB in and transfer 500 GB out through each site.

  • AWS Site-to-Site VPN Concentrator fee: There is an hourly fee for AWS Site-to-SIte VPN Concentrator, while Concentrator is active. The fee is $1.95 per hour. You pay $1,404.00 per month in Concentrator fees.
  • AWS Site-to-Site VPN connection fee: There is an hourly fee for AWS Site-to-Site VPN connections from each site, while connections are active. The fee is $0.01 per hour for each site connected via VPN Concentrator. You pay $7.20 per month in connection fees for each site. For 50 sites, you pay $360.00 in connection fees for all sites.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachments. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month for 1 VPN Concentrator attachment. 
  • Data transfer out fee: For 50 sites, you incur total usage of 25,000 GB (50 sites * 500 GB usage per site). The first 100 GB are free, so you pay for 24,900 GB. For the first 10,240 GB, you pay at $0.09 per GB. For the remaining 14,660 GB, you pay at $0.085 per GB. You pay $2,167.70 per month in data transfer out fees.

You pay $3,967.70 per month for AWS Site-to-Site VPN Concentrator, with 50 remote sites connected to the Concentrator.

Pricing example 6: Connectivity to large number of sites using 1.25 Gbps Site-to-Site VPN

You create 50 AWS Site-to-Site VPN 1.25 Gbps connection to AWS Transit Gateway in US East (Ohio) to connect 50 remote sites (one VPN connection per site) in North America to access workloads in AWS. The connection is active for 30 days, 24 hours a day. You transfer 1000 GB in and transfer 500 GB out through each site.

  • AWS Site-to-Site VPN connection fee: There is an hourly fee for 1.25 Gbps AWS Site-to-Site VPN, while connections are active. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month in connection fees for 1 connection. For 50 connections, you pay $1,800.00 connection fees.
  • AWS Transit Gateway fee: There is an hourly fee for creating AWS Transit Gateway attachments. For the US East (Ohio) Region, the fee is $0.05 per hour. You pay $36.00 per month for 1 VPN attachment. For 50 VPN attachments (one per site), you pay $1,800.00 attachment fees.
  • Data transfer out fee: For 50 sites, you incur total usage of 25,000 GB (50 sites * 500 GB usage per site). The first 100 GB are free, so you pay for 24,900 GB. For the first 10,240 GB, you pay at $0.09 per GB. For the remaining 14,660 GB, you pay at $0.085 per GB. You pay $2,167.70 per month in data transfer out fees.

You pay $5,767.70 per month for connecting 50 remote sites to AWS Transit Gateway using 1.25 Gbps AWS Site-to-Site VPN.

 

AWS Client VPN pricing

Each Client VPN connection uses unique public IPv4 address for the tunnels. You will incur standard public IPv4 address charges on the IPv4 address that will be used for the tunnels. Please visit the public IPv4 address section of the VPC pricing page for more details.

Pricing example: AWS Client VPN

You create an AWS Client VPN endpoint in US East (Ohio) and associate it with one subnet. You then create 10 Client VPN connections to your AWS Client VPN endpoint. These connections are active for one hour.

  • AWS Client VPN endpoint hourly fee: For this AWS Region, you pay $0.10 per hour in AWS Client VPN endpoint hourly fees.
  • AWS Client VPN connection hourly fee: Ten AWS Client VPN connections were active for 1 hour. You pay $0.50 per hour in AWS Client VPN connection fees.

In this scenario, you pay $0.60 per hour for AWS Client VPN.