AWS Security ChangesHomeSearch

AWS sap documentation change

Service: sap · 2026-07-07 · Documentation low

File: sap/latest/general/rise-connection-accounts.md

Summary

Updated pricing examples with improved formatting: converted note sections to markdown notes, changed currency symbols from '$' to 'USD', and added explicit note headers.

Security assessment

The changes are purely cosmetic and structural, focusing on pricing clarity and currency notation. There is no mention of security vulnerabilities, access controls, encryption, or security best practices. The content remains exclusively about cost calculations for data transfer scenarios.

Diff

diff --git a/sap/latest/general/rise-connection-accounts.md b/sap/latest/general/rise-connection-accounts.md
index 8f273721a..88bd0324e 100644
--- a//sap/latest/general/rise-connection-accounts.md
+++ b//sap/latest/general/rise-connection-accounts.md
@@ -57 +57,5 @@ For more information see:
-**Pricing example – Transit Gateway in VPCs in the same region via VPN or Direct Connect** _[NOTE: cost between AWS Regions vary. For more information see:[ Amazon EC2 pricing Data Transfer](https://aws.amazon.com/ec2/pricing/on-demand/#Data_Transfer)]_ ![Transit Gateway in VPCs in the same region via VPN or Direct Connect.](/images/sap/latest/general/images/connectivity-transit-same-regions-via-vpndxc-pricing.png) 1). 200GB of data sent from a VPC in the AWS account – managed by SAP via the Transit Gateway that resided in the AWS account – managed by Customer via a VPN or Direct Connect in the AWS account – managed by SAP towards On-Premises: 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 100 GB * $0.09per-GB = $9 (VPN data transfer out, with the first 100 GB are free, then $ 0.09 per-GB) = $13 (Total data transfer out billed to AWS account – managed by SAP) or 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 200GB * ($0.02-$0.19per-GB) = $4-$38 (Direct Connect data transfer out) = $8-$42 (Total data transfer out billed to AWS account – managed by SAP) Data processing is charged to the VPC owner who sends the traffic to Transit Gateway. As the sending VPC is residing in the AWS account – managed by SAP and the cost for data transfer is included in the RISE Subscription, therefore the AWS account – managed by Customer will not incur Data Transfer cost in this example. 2). 200GB of data sent from On-Premises via a VPN or Direct Connect in the AWS account – managed by Customer via the Transit Gateway that resided in the AWS account – managed by Customer towards VPC in the AWS account – managed by SAP: 200GB * $0.00per-GB = $0 (VPN data transfer in) + 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + $0 (VPN data transfer in) = $4 (Total data transfer in billed to AWS account – managed by Customer) or 200GB * $0.00per-GB = $0 (Direct Connect data transfer in) + 200GB * $0.02per-GB = $4 (Transit Gateway data processing) = $4 (Total data transfer in billed to AWS account – managed by Customer) Data transfer into AWS is free and this also applies to VPN and Direct Connect therefore the only data processing charge is the data processing of the Transit Gateway. As Transit Gateway resides in the AWS account – managed by Customer the cost for data transfer is billed to the AWS account – managed by Customer  
+**Pricing example – Transit Gateway in VPCs in the same region via VPN or Direct Connect**
+
+###### Note
+
+Cost between AWS Regions vary. For more information, see [Amazon EC2 pricing Data Transfer](https://aws.amazon.com/ec2/pricing/on-demand/#Data_Transfer). ![Transit Gateway in VPCs in the same region via VPN or Direct Connect.](/images/sap/latest/general/images/connectivity-transit-same-regions-via-vpndxc-pricing.png) 1). 200GB of data sent from a VPC in the AWS account – managed by SAP via the Transit Gateway that resided in the AWS account – managed by Customer via a VPN or Direct Connect in the AWS account – managed by SAP towards On-Premises: 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 100 GB * USD 0.09 per GB = USD 9 (VPN data transfer out, with the first 100 GB are free, then USD 0.09 per GB) = USD 13 (Total data transfer out billed to AWS account – managed by SAP) or 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 200GB * (USD 0.02–USD 0.19 per GB) = USD 4–USD 38 (Direct Connect data transfer out) = USD 8–USD 42 (Total data transfer out billed to AWS account – managed by SAP) Data processing is charged to the VPC owner who sends the traffic to Transit Gateway. As the sending VPC is residing in the AWS account – managed by SAP and the cost for data transfer is included in the RISE Subscription, therefore the AWS account – managed by Customer will not incur Data Transfer cost in this example. 2). 200GB of data sent from On-Premises via a VPN or Direct Connect in the AWS account – managed by Customer via the Transit Gateway that resided in the AWS account – managed by Customer towards VPC in the AWS account – managed by SAP: 200GB * USD 0.00 per GB = USD 0 (VPN data transfer in) + 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + USD 0 (VPN data transfer in) = USD 4 (Total data transfer in billed to AWS account – managed by Customer) or 200GB * USD 0.00 per GB = USD 0 (Direct Connect data transfer in) + 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) = USD 4 (Total data transfer in billed to AWS account – managed by Customer) Data transfer into AWS is free and this also applies to VPN and Direct Connect therefore the only data processing charge is the data processing of the Transit Gateway. As Transit Gateway resides in the AWS account – managed by Customer the cost for data transfer is billed to the AWS account – managed by Customer  
@@ -59 +63,5 @@ For more information see:
-**Pricing example – Transit Gateway in VPCs in the different regions via VPN or Direct Connect** _[NOTE: cost between AWS Regions vary. For more information see:[ Amazon EC2 pricing Data Transfer](https://aws.amazon.com/ec2/pricing/on-demand/#Data_Transfer)]_ ![Transit Gateway in VPCs in the different regions via VPN or Direct Connect.](/images/sap/latest/general/images/connectivity-transit-different-regions-via-vpndxc-pricing.png) 1). 200GB of data sent from a VPC in the AWS account – managed by SAP via the Transit Gateway that resided in the AWS account – managed by SAP that is peered with an Transit Gateway in a different Region in the AWS account – managed by Customer via a VPN OR Direct Connect in the AWS account – managed by Customer towards On-Premises: 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 200GB * ($0.01-$0.138per-GB) = $2-$27.6 (Region out) + 100GB * $0.09per-GB = $9 (VPN data transfer out, with the first 100 GB are free, then $ 0.09 per-GB) = $15-$40.6 (Total data transfer out billed to AWS account – managed by SAP) or 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 200GB * ($0.01-$0.138per-GB) = $2-$27.6 (Region out) + 200GB * ($0.02-$0.19per-GB) = $4-$38 (Direct Connect data transfer out) = $10-$69.6 (Total data transfer out billed to AWS account – managed by SAP) Data processing is charged to the VPC owner who sends the traffic to Transit Gateway. As the sending VPC is residing in the AWS account – managed by SAP and the cost for Data Transfer is included in the RISE subscription, therefore the AWS account – managed by Customer will not incur Data Transfer cost in this example. 2). 200GB of data sent from On-Premises via a VPN or Direct Connect in the AWS account – managed by Customer via the Transit Gateway that resided in the AWS account – managed by Customer via a peered Transit Gateway in a different region in the AWS account – managed by SAP towards a VPC in the AWS account – managed by SAP: 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 200GB * $0.00per-GB = $0 (VPN data transfer in) + 200GB * ($0.01-$0.138per-GB) = $2-$27.6 (Region out) = $6-$31.6 (Total data transfer in billed to AWS account – managed by Customer) or 200GB * $0.02per-GB = $4 (Transit Gateway data processing) + 200GB * $0.00per-GB = $0 (Direct Connect data transfer in) + 200GB * ($0.01-$0.138per-GB) = $2-$27.6 (Region out) = $6-$31.6 (Total data transfer in billed to AWS account – managed by Customer) Data transfer into AWS in is free and this also applies to VPN and Direct Connect therefore the data processing charge is the data processing of the Transit Gateway and the inter-region data transfer charges. As Transit Gateway resides in the AWS account – managed by Customer, the cost for data transfer is billed to the AWS account – managed by Customer.  
+**Pricing example – Transit Gateway in VPCs in the different regions via VPN or Direct Connect**
+
+###### Note
+
+Cost between AWS Regions vary. For more information, see [Amazon EC2 pricing Data Transfer](https://aws.amazon.com/ec2/pricing/on-demand/#Data_Transfer). ![Transit Gateway in VPCs in the different regions via VPN or Direct Connect.](/images/sap/latest/general/images/connectivity-transit-different-regions-via-vpndxc-pricing.png) 1). 200GB of data sent from a VPC in the AWS account – managed by SAP via the Transit Gateway that resided in the AWS account – managed by SAP that is peered with an Transit Gateway in a different Region in the AWS account – managed by Customer via a VPN OR Direct Connect in the AWS account – managed by Customer towards On-Premises: 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 200GB * (USD 0.01–USD 0.138 per GB) = USD 2–USD 27.6 (Region out) + 100GB * USD 0.09 per GB = USD 9 (VPN data transfer out, with the first 100 GB are free, then USD 0.09 per GB) = USD 15–USD 40.6 (Total data transfer out billed to AWS account – managed by SAP) or 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 200GB * (USD 0.01–USD 0.138 per GB) = USD 2–USD 27.6 (Region out) + 200GB * (USD 0.02–USD 0.19 per GB) = USD 4–USD 38 (Direct Connect data transfer out) = USD 10–USD 69.6 (Total data transfer out billed to AWS account – managed by SAP) Data processing is charged to the VPC owner who sends the traffic to Transit Gateway. As the sending VPC is residing in the AWS account – managed by SAP and the cost for Data Transfer is included in the RISE subscription, therefore the AWS account – managed by Customer will not incur Data Transfer cost in this example. 2). 200GB of data sent from On-Premises via a VPN or Direct Connect in the AWS account – managed by Customer via the Transit Gateway that resided in the AWS account – managed by Customer via a peered Transit Gateway in a different region in the AWS account – managed by SAP towards a VPC in the AWS account – managed by SAP: 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 200GB * USD 0.00 per GB = USD 0 (VPN data transfer in) + 200GB * (USD 0.01–USD 0.138 per GB) = USD 2–USD 27.6 (Region out) = USD 6–USD 31.6 (Total data transfer in billed to AWS account – managed by Customer) or 200GB * USD 0.02 per GB = USD 4 (Transit Gateway data processing) + 200GB * USD 0.00 per GB = USD 0 (Direct Connect data transfer in) + 200GB * (USD 0.01–USD 0.138 per GB) = USD 2–USD 27.6 (Region out) = USD 6–USD 31.6 (Total data transfer in billed to AWS account – managed by Customer) Data transfer into AWS in is free and this also applies to VPN and Direct Connect therefore the data processing charge is the data processing of the Transit Gateway and the inter-region data transfer charges. As Transit Gateway resides in the AWS account – managed by Customer, the cost for data transfer is billed to the AWS account – managed by Customer.