AWS Network Firewall Pricing Calculator - Estimate Endpoint and Traffic Processing Costs

In us-east-1, a primary Network Firewall endpoint is $0.395/hour, a secondary endpoint is $0.158/hour, and standard traffic processing is $0.065/GB. Your monthly total depends on how many endpoints you keep active, how much traffic you inspect, and whether you enable Advanced Inspection or Advanced Threat Protection.

Secondary endpoints are discounted hourly endpoints used when one firewall is associated with multiple VPCs in the same Region and Availability Zone. They do not add a separate per-GB processing charge; traffic processing is still billed on the standard firewall traffic meter.

Advanced Inspection adds an extra hourly endpoint charge when TLS inspection is enabled. The standard traffic processing charge still applies, but AWS does not add a second per-GB charge specifically for Advanced Inspection traffic.