CloudFront Pricing Calculator - CDN & Security Savings Bundle

Calculate Amazon CloudFront costs for CDN delivery, Lambda@Edge, and CloudFront Functions. Compare pay-as-you-go pricing with Security Savings Bundle flat-rate plans. Estimate data transfer and request costs by edge location.

+4 more

Frequently Asked Questions

What is a CloudFront pricing calculator?

A CloudFront pricing calculator estimates AWS CDN costs based on data transfer volume, request counts, edge location, and compute features like Lambda@Edge or CloudFront Functions. It helps you compare pay-as-you-go pricing with Security Savings Bundle plans before deploying.

How do I calculate CloudFront costs?

Calculate CloudFront costs by multiplying your data transfer out (GB) by the per-GB rate for your edge location, then add request costs (per 10,000 HTTP/HTTPS requests). Include costs for Lambda@Edge, CloudFront Functions, Origin Shield, and real-time logs if you use these features.

Does CloudFront pricing vary by edge location?

Yes, CloudFront pricing varies by edge location. US and Europe have the lowest rates, while regions like Asia Pacific, South America, and Middle East cost 20-40% more. This calculator shows pricing for all 8 edge location groups.

Should I use pay-as-you-go or Security Savings Bundle?

Pay-as-you-go is best for variable traffic or when you're unsure about usage. The Security Savings Bundle offers predictable costs with bundled CloudFront, Route 53, WAF, and DDoS protection. Bundle plans have no overage charges but may not suit very high-traffic sites.

What is included in the CloudFront free tier?

The CloudFront Always Free tier includes 1 TB data transfer out, 10 million HTTP/HTTPS requests, 2 million CloudFront Function invocations, and 2 million KeyValueStore reads per month. This applies to all AWS accounts indefinitely.

When should I use Lambda@Edge vs CloudFront Functions?

Use CloudFront Functions for simple, fast operations like URL rewrites, header manipulation, or A/B testing (<1ms execution). Use Lambda@Edge for complex logic requiring network calls, longer execution time, or more memory. CloudFront Functions cost ~$0.10/1M invocations vs Lambda@Edge at ~$0.60/1M.

Is Origin Shield worth the cost?

Origin Shield adds a centralized caching layer that reduces origin load and improves cache hit ratios. It's worth it if you have high traffic with low cache hit rates, expensive origin requests, or need to protect your origin from traffic spikes. At ~$0.009/10K requests, it can significantly reduce origin costs.

How much do CloudFront logs cost?

CloudFront offers two logging options: S3 standard logs have no delivery charge (you pay only for S3 storage), while CloudWatch Logs provide 750 bytes free per request with overages billed at CloudWatch rates. Real-time logs cost $0.01 per million log lines delivered to Kinesis.

Do CloudFront logs incur S3 storage costs?

Yes, CloudFront access logs delivered to S3 incur S3 storage costs for storing log files, but there's no charge for log delivery itself. Use our S3 pricing calculator to estimate storage expenses based on your log volume.

What is included in the Security Savings Bundle?

The Security Savings Bundle includes: CloudFront CDN, Route 53 DNS, AWS WAF (with varying rule limits), always-on DDoS protection, CloudWatch Logs ingestion, free TLS certificates, CloudFront Functions compute, and monthly S3 storage credits. Plans range from Free ($0) to Premium ($1,000/month).

How does CloudFront tiered pricing work?

CloudFront offers volume-based discounts: your first 10 TB costs more per GB, while subsequent tiers (10-50 TB, 50-150 TB, etc.) have progressively lower rates. For example, US pricing drops from $0.085/GB (first 10 TB) to $0.020/GB (over 5 PB).

How do I deploy CloudFront with Infrastructure as Code?

AWS CDK makes it easy to deploy CloudFront distributions with L2 constructs. You can create a CloudFront distribution with S3 origin for static hosting, or configure custom origins for dynamic content. CDK handles SSL certificates, caching behaviors, and Origin Access Identity automatically.

Tip

Stop AWS bill surprises from happening.

Most infrastructure changes look harmless until you see next month's AWS bill. CloudBurn prevents this by analyzing the cost impact of your AWS CDK changes directly in GitHub pull requests, catching expensive mistakes during code review when fixes are quick, not weeks later when they're costly and risky.

See the setup guide to get started.