Skip to main content

VPC: Delete Unused VPC Endpoints

Updated this week

Difficulty: Easy

Description

We have identified a number of VPC Interface Endpoints in your account that are not being used. VPC Interface Endpoints allow your VPC to connect to AWS services privately without going through the internet, but idle endpoints continue to incur hourly charges with no benefit.


Selection Criteria

  • The VPC Endpoint has 0 data processing in the last 31 days.

  • The VPC Endpoint has existed for more than 31 days.

  • The VPC Endpoint is in the Available status.


Expected Saving

Interface VPC Endpoints cost $0.01/hour per AZ (~$7.20/month per AZ) regardless of traffic. Deleting an unused endpoint eliminates the hourly charge entirely.


Operational Impact

  • Breaking changes: Deleting an endpoint removes the private connectivity path for that AWS service. Resources relying on it will either fall back to an internet route (if available) or lose connectivity to that service.

  • ⚠️ Warning — Interface endpoints only: Gateway endpoints (S3, DynamoDB) are free and excluded from this recommendation. Only Interface endpoints incur hourly charges.

  • ⚠️ Warning — Endpoint DNS references: Some applications may use the endpoint-specific DNS name. Verify no workloads reference the endpoint DNS before deleting.


References

Did this answer your question?