Landing Zone Accelerator on AWS Implementation Guide

Cost

Plan your deployment

This section describes the cost, security, Region, and quota considerations for planning your deployment.

Cost
Note
You are responsible for the cost of the AWS services used while running this solution. As of
December 2022, the cost for running this solution using the Landing Zone Accelerator on AWS
best practices configuration with AWS Control Tower in the US East (N. Virginia) Region within a
non-critical sandbox environment with no activity or workloads is approximately $527.09 (USD)
per month.

We recommend creating a budget through AWS Cost Explorer to help manage costs. Prices are subject to
change. For full details, refer to the pricing webpage for each AWS service used in this solution.

AWS service Cost per month [USD]

AWS CloudTrail $43.66

AWS Config $325.02

AWS Key Management Service (AWS KMS) $64.47

Amazon Kinesis $24.27

Amazon Kinesis Data Firehose $0.79

Amazon Simple Storage Service (Amazon S3) $3.15

Amazon Virtual Private Cloud (Amazon VPC) $65.73

Total monthly cost $527.09

Note
Data transfer, Amazon CloudWatch, AWS CodeArtifact, Amazon Detective, Amazon DynamoDB,
Amazon GuardDuty, AWS Lambda, Amazon Macie, AWS Secrets Manager, AWS Security Hub,
AWS Service Catalog, Amazon Simple Notification Service (Amazon SNS), Amazon Simple Queue
Service (Amazon SQS), AWS Step Functions, and AWS Systems Manager are priced at the Free
Tier or less than $0.01 per month.

Security
When you build systems on AWS infrastructure, security responsibilities are shared between you and
AWS. This shared model reduces your operational burden because AWS operates, manages, and controls
the components including the host operating system, the virtualization layer, and the physical security
of the facilities in which the services operate. For more information about AWS security, visit AWS Cloud
Security.

18