Skip to content

runbooks vpc nat-gateway

Auto-generated from runbooks vpc nat-gateway --help on 2026-05-21. Source of truth: runbooks PyPI package v1.3.22

Usage: runbooks vpc nat-gateway [OPTIONS]

  NAT Gateway cost optimization and rightsizing analysis.

  🎯 EPIC 2: NAT GATEWAY OPTIMIZATION TARGETS
  ┌────────────────────────────────────────────┐
  │ Cost Reduction: 25-50% network savings     │
  │ Utilization Target: >70% bandwidth usage   │
  │ Consolidation: Multi-AZ → Single-AZ        │
  │ Replacement: NAT Gateway → NAT Instance    │
  └────────────────────────────────────────────┘

  🔄 Analysis Workflow:
  1. Discover all NAT Gateways across VPCs
  2. Analyze CloudWatch metrics (bandwidth, connections)
  3. Calculate cost per GB transferred
  4. Identify consolidation opportunities
  5. Generate rightsizing recommendations

  💰 Typical Savings: $500-2000/month per optimized NAT Gateway 📖 Example:
  runbooks vpc nat-gateway --profile ops --output-dir /tmp/

Options:
  --profile TEXT                  AWS profile for single-account operations.

                                  📋 Profile Selection Guide: ━━━━━━━━━━━━━━━━━
                                  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

                                  Single Account → Use --profile YOUR_PROFILE
                                  Example: --profile dev-account   When:
                                  Developer/operator working in one AWS
                                  account

                                  Multi-Account LZ → Use --all-profiles (see
                                  inventory commands)   Example: --all-
                                  profiles   When: Platform team discovering
                                  across organization

                                  🔐 Enrichment Profiles (Automatic):   •
                                  Organizations: MANAGEMENT_PROFILE   • Costs:
                                  BILLING_PROFILE   Note: Separate from
                                  discovery profile

                                  Decision: Single account = --profile |
                                  Multi-account = --all-profiles
  --region TEXT                   AWS region override (default: ap-
                                  southeast-2)
  --dry-run                       Safe analysis mode - no resource
                                  modifications (enterprise default)
  -f, --format, --output-format [json|csv|table|pdf|markdown]
                                  Output format for results display
                                  (-f/--format preferred, --output-format
                                  legacy)
  --output-dir PATH               Directory for generated files and evidence
                                  packages
  --all-outputs                   Generate all output formats (JSON, CSV, PDF,
                                  Markdown) - use with --output-dir
  --csv                           Export to CSV format (convenience flag,
                                  activates --all-outputs)
  --json                          Export to JSON format (convenience flag,
                                  activates --all-outputs)
  --markdown                      Export to Markdown format (convenience flag,
                                  activates --all-outputs)
  --analyze                       Analyze NAT Gateway usage and costs
  --optimize                      Generate optimization recommendations
  --savings-target FLOAT RANGE    Target savings percentage  [0.1<=x<=0.8]
  --include-alternatives          Include NAT instance alternatives
  --all                           Use all available AWS profiles for multi-
                                  account NAT Gateway analysis
  --help                          Show this message and exit.

Examples