Nat gateways really only hurt if you have fairly high traffic iirc. AWS always dings you on egress traffic in general.

In that case this may be preferable: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Ins...