AWS Security ChangesHomeSearch

AWS solutions documentation change

Service: solutions · 2025-11-19 · Documentation low

File: solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/cost.md

Summary

Restructured cost documentation to differentiate between Lambda and ECS architectures, updated cost tables, and added detailed cost considerations for both deployment models.

Security assessment

The changes focus exclusively on cost breakdowns and architectural comparisons without addressing vulnerabilities, security patches, or security configurations. The only security-related mention (image URL signature using Secrets Manager) is unchanged from previous documentation and appears in cost context only.

Diff

diff --git a/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/cost.md b/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/cost.md
index 0b1309363..70e4515d5 100644
--- a//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/cost.md
+++ b//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/cost.md
@@ -5 +5 @@
-Sample cost tableDemo UIImage modification and analysis
+Lambda architecture costsECS architecture costsCost considerations
@@ -9 +9 @@ Sample cost tableDemo UIImage modification and analysis
-You are responsible for the cost of the AWS services used while running this solution. As of this revision, the cost for running the solution with the default settings in the US East (N. Virginia) Region is approximately **$5.30 per month** for 100,000 new images, **$22.51 per month** for 1,000,000 new images, and **$7.65 per month** for 1,000,000 cached images (refer to the Sample cost table for the cost breakdown). These estimates use information about image sizing and lambda processing time from common use cases.
+The cost for running this solution varies significantly between the two deployment architectures. Choose the architecture that best balances your performance requirements with cost considerations.
@@ -13 +13 @@ We recommend creating a [budget](https://docs.aws.amazon.com/cost-management/lat
-## Sample cost table
+## Lambda architecture costs
@@ -15 +15,5 @@ We recommend creating a [budget](https://docs.aws.amazon.com/cost-management/lat
-The following table provides a sample cost breakdown for deploying this solution with the default parameters in the US East (N. Virginia) Region for one month.
+You are responsible for the cost of the AWS services used while running the Lambda architecture. As of this revision, the cost for running the solution with the default settings in the US East (N. Virginia) Region is approximately **$5.30 per month** for 100,000 new images, **$22.51 per month** for 1,000,000 new images, and **$7.65 per month** for 1,000,000 cached images.
+
+### Lambda architecture cost breakdown
+
+The following table provides a sample cost breakdown for deploying the Lambda architecture with the default parameters in the US East (N. Virginia) Region for one month.
@@ -23,4 +27,34 @@ AWS service | Dimensions | Cost [USD] (100,000 new images) | Cost [USD] (1,000,0
-**AWS Secrets Manager** `**` |  |  $0.90 |  $5.40 |  $0.40  
-**Amazon CloudWatch Dashboard** `^` |  |  $3.00 |  $3.00 |  $3.00  
-**Amazon CloudWatch Logs** |  |  $0.03 |  $0.33 |  $0.00  
-**Total** |  |  **$5.30/$4.98** |  **$22.51/$19.26** |  **$7.65**  
+**Amazon S3** |  store 50 KB image per request |  $0.23 |  $2.30 |  $2.30  
+**Amazon CloudWatch** |  logs and metrics |  $0.67 |  $6.18 |  $1.10  
+**Total** |  |  **$2.30/$2.27** |  **$22.51/$19.26** |  **$7.65**  
+  
+## ECS architecture costs
+
+The ECS architecture has higher baseline costs due to always-running infrastructure but provides better performance and advanced features. Costs scale with the selected t-shirt size and auto-scaling configuration.
+
+### ECS architecture cost summary
+
+### Assumptions
+
+  * 85% cache hit rate
+
+  * Average image size: 1 MB
+
+  * ALB configuration is Small, Medium and Large for the corresponding workloads
+
+  * Actual cost might vary based on burst traffic patterns
+
+
+
+
+### ECS architecture cost breakdown
+
+The following table provides sample cost breakdowns for different ECS deployment sizes in the US East (N. Virginia) Region for one month.
+
+AWS Service | Small (1M images served) | Medium (100M images served) | Large (1B images served)  
+---|---|---|---  
+Amazon CloudFront |  $87.50 |  $7,219.00 |  $73,000.00  
+AWS ECS |  $72.08 |  $216.24 |  $576.64  
+Application Load Balancer |  $17.63 |  $139.31 |  $1,230.00  
+CloudWatch Logs |  $0.22 |  $22.66 |  $226.58  
+**Total** |  **$177.43** |  **$7,597.21** |  **$75,033.22**  
@@ -28 +62 @@ AWS service | Dimensions | Cost [USD] (100,000 new images) | Cost [USD] (1,000,0
-_* The cost for Amazon API Gateway is incurred only if Enable S3 Object Lambda is set to No. The cost for Amazon S3 Object Lambda is incurred only if Enable S3 Object Lambda is set to Yes._
+## Cost considerations
@@ -30 +64 @@ _* The cost for Amazon API Gateway is incurred only if Enable S3 Object Lambda i
-_** The cost for AWS Secrets Manager is incurred only when the image URL signature feature is activated._
+**Cost Considerations:** Lambda architecture incurs AWS Secrets Manager costs only when image URL signature feature is activated, and operational dashboard usage may fall under CloudWatch free tier. ECS architecture costs reflect continuous operation with minimum task counts, with auto-scaling increasing costs during high-traffic periods, and DynamoDB costs based on typical usage patterns. Additional costs may include Amazon S3 PUT/GET requests depending on caching effectiveness, Amazon Rekognition charges for smart cropping or content moderation features, external origin data transfer costs, and negligible Cognito costs for Admin UI authentication (typically under $1/month for single-user operation).
@@ -32 +66 @@ _** The cost for AWS Secrets Manager is incurred only when the image URL signatu
-_^ The operational dashboard included with the solution may fall under the free tier, refer to[ CloudWatch pricing](https://aws.amazon.com/cloudwatch/pricing/) for the most up to date pricing information. For information on how to disable the deployment of the operational dashboard, refer to [Optional Mappings](./optional-mappings.html)._
+_The operational dashboard included with the solution may fall under the free tier, refer to[ CloudWatch pricing](https://aws.amazon.com/cloudwatch/pricing/) for the most up to date pricing information. For information on how to disable the deployment of the operational dashboard, refer to [Optional Mappings](./.html#optional-mappings)._
@@ -34 +68 @@ _^ The operational dashboard included with the solution may fall under the free
-## Demo UI
+**Demo UI**
@@ -38 +72 @@ If you choose to deploy the demo UI, the solution automatically deploys an addit
-## Image modification and analysis
+**Image modification and analysis**