Network Address Translation (NAT) gateway

The NAT (Network Address Translation) Gateway is a service that enables instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating connections with those instances.

Key points about NAT Gateway:

It is managed by AWS, providing high availability and scalability.
It is used to enable outbound internet traffic from instances in a private subnet.
It supports TCP, UDP, and ICMP protocols.

Points to remember

It is charged based on usage and data transfer rates.
To create a NAT gateway where you must specify the public subnet in which the NAT gateway should reside.
You must also specify an elastic IP address to associate with NAT gateway when you create it.

Elastic IP act as a translation point for outbound traffic from your private subnet.
After You create a net gateway you must update the routing table associated with one or more of a private subnet to point internet bound traffic to the NAT gateways
the leading net gateway format is associates its elastic ip address but doesnt release the address from your account.

If you're not using Elastic IP address you will get charged by AWS.

Endpoints Virtual Private Network (VPN)