AWS’s VPC Encryption Controls enable auditing and enforcing encryption for data flows within and across virtual networks, enhancing cloud security compliance. Available in Monitor mode (detection only) and Enforce mode (blocking unencrypted traffic), the service started charging a fixed hourly rate per non-empty VPC from March 2026.
This pricing shift affects users implementing encryption within Transit Gateway–attached VPCs, which incur costs even if empty. The introduction of pricing highlights AWS’s move to commercially scale this security feature while maintaining ongoing support across regions.
Source & further reading
AWS announces pricing for VPC Encryption Controls ↗Source published 2026-03-01. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.