AWS is transitioning VPC Encryption Controls from free preview to a paid feature starting March 1, 2026. The feature lets users audit and enforce encryption-in-transit for all traffic within and across VPCs. It supports two modes: Monitor (detects unencrypted traffic) and Enforce (blocks unencrypted traffic). Pricing is a fixed hourly rate per non-empty VPC with Encryption Controls enabled. Empty VPCs are not charged unless a Transit Gateway with encryption support is attached, in which case standard charges apply to all attached VPCs.
791 Impressions