> [...] route the traffic out of NAT Gateways. Which is AWS's way of printing money. Straight up, no lie. Instead with the advent of IPv6 and everything getti

> [...] route the traffic out of NAT Gateways. Which is AWS's way of printing money. Straight up, no lie. Instead with the advent of IPv6 and everything getting a publicly routable IP address anyway, you no longer can rely on a machine having a "private" IP address. I recently stood up infrastructure where each machine in the VPC got a public IPv4 and IPv6, and used security groups to set up permissions for what systems can access what other systems. This way I protect the instances, and don't pay the NAT Gateway fee because the public IP is a 1:1 NAT and doesn't cost anything.