Track and cap Amazon Bedrock spend per IAM identity with CUR 2.0 and AWS Budgets

At a glance

This guide explains how to see Amazon Bedrock AI costs for each IAM identity, a user or role, and block access once a set limit is passed, using only built-in AWS features. Most cases need no custom code.

Key points

1. 1

   Bedrock automatically records which IAM identity made each request.

2. 2

   Adding cost tags lets you see per-person spending in Cost Explorer or CUR 2.0.

3. 3

   AWS Budgets can set a limit and attach a Deny policy that blocks access when it is crossed.

4. 4

   How you tag depends on whether each person or app has its own role.

Why it matters

Companies need to know who spends how much on AI and set limits before expanding access, so they can control costs.