Amazon VPC
Does ZopNight manage Amazon VPC?
A VPC itself appears nowhere on an AWS bill: the spend lives in what attaches to it, from NAT gateways to interface endpoints to peering traffic. ZopNight discovers VPCs through Resource Explorer 2 on the 6-hour cycle and uses them as the grouping anchor for attributing cost and spotting abandoned environments.
Rules that fire on Amazon VPC
At a glance
| Field | Value |
|---|---|
| Scheduling notes | discovery and topology context only. |
An Amazon Virtual Private Cloud (VPC) is an isolated virtual network that contains subnets, gateways, and the resources deployed into them. The VPC itself is free, but it is the anchor for cost-bearing attachments such as NAT gateways, endpoints, and peering, and for understanding what a given environment contains.
Free container, expensive contents
Creating and keeping a VPC costs nothing, and no meter tracks it directly. Everything billable hangs off it: NAT gateways metering hourly plus per-GB, interface endpoints billing per endpoint-hour per AZ, transit gateway attachments billing hourly, and the data-transfer charges generated whenever its workloads talk across zones or regions. A VPC is best read as a cost boundary rather than a cost item: the unit at which an environment’s networking floor can be added up and questioned.
What ZopNight anchors to a VPC
Discovery runs through Resource Explorer 2 on the 6-hour cycle, and the VPC serves as topology context: resources inside it get grouped and attributed together, so a development VPC’s total footprint across compute, cache, NAT, and endpoints reads as one number instead of thirty scattered line items. Hygiene recommendations flag empty or abandoned VPCs, because a VPC with no running workloads but surviving paid attachments is the skeleton of a half-deleted environment, and those attachments are pure waste.
Environment sprawl, one VPC at a time
VPCs multiply through automation: account-vending machines and starter templates stamp out a VPC per account or per project, each typically bundling NAT gateways per AZ from day one. The workload arrives late or never, but the NAT floor bills immediately. Old default VPCs collect strays in every region. And migration projects leave source VPCs intact long after cutover, each still carrying its endpoints and gateways.
Auditing VPCs as environments
The VPC console’s Your VPCs view lists each VPC per region; the useful audit walks its dependents (NAT gateways, endpoints, peerings, attachments) and asks what still runs inside. An empty VPC deletes for free once its billed accessories are removed, and the accessories are the point: the VPC is just where they hide.