Pricing for traffic within a region EC2 <-> S3

Ok, thanks for the detailed answer.

I don't have much experience with VPC endpoints yet.

I create an endpoint to com.amazonaws.eu-central-1.s3 as gateway and what happens next?

How can I then access S3 from my EC2-instance via the endpoint?

Ok, I read the article and that's how I understand it:

1. I create a endpoint in my VPC, type: gateway s3.eu-central-1
2. I chance my routing table with the CIRDs of the S3-service in eu-central-1.
3. Any s3 data traffic from my ec2-instance routed directly internally via the VPC and the S3 gateway.

From my instance, I make a "ping" to s3.eu-central-1.amazonaws.com. Now, ping gives me a IP address. The IP address is contained in the routing table.

How can I still check whether the traffic is really routed internally and not via the Internet gateway?

And, configuration ok?

Hello Hacky,

If you are transferring the data to S3 bucket directly using the DNS address, the regardless of the the location of the bucket, you will be charged for data transfer as EC2 has a data transfer out charges as the data transfer will be considered as transfer out to internet. The pricing details are here.

However to eliminate the data transfer out charges, you can set up a VPC endpoint for your S3 bucket. That will ensure that the traffic flows over AWS network and remains secure.