Security & identity

AWS Network Firewall

Timebilled
Bytesbilled
Callsnot billed

In one line

An hourly fee for each firewall endpoint in each AZ, plus a per-GB charge on inspected traffic.

What gets missed

Endpoints are billed per AZ, so a three-AZ VPC runs three hourly meters before any traffic flows. The per-GB fee is on traffic processed by the firewall, which includes traffic that never leaves AWS.

Find it on your bill

Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.

Endpoint-Hour
Secondary-Endpoint-Hour
Traffic-GB-Processed

Bills the same way

These services turn exactly the same meters, so what you learn here transfers.