← Back to the blog

Blog

Bedrock costs: FinOps needs accountable owners

AI budgets rarely fail with the first model call. They fail when nobody can explain at month-end which product, team, or workflow created the cost. AWS now shows how Amazon Bedrock inference costs can be analysed down to the calling IAM principal.

From total spend to an accountable unit

The basis is a CUR 2.0 data export with caller-identity allocation enabled. According to AWS, this populates the line_item_iam_principal column. Companies can then query spend in Amazon Athena by calling identity and usage type. Additional cost-allocation tags support aggregation by team, project, or tenant, while CUDOS provides prepared visualisations.

This is more than a reporting detail. A central Bedrock account with shared roles creates an invoice, but not management information. Only the combination of usage, identity, and a business dimension makes chargeback, budget accountability, and defensible unit economics possible.

Why this belongs in the operating model now

The added transparency meets broader agent adoption. On 12 August, OpenAI reported that companies are increasingly using AI for multi-step execution; among the enterprise customers it studied, the top ten percent of users generated 8.3 times as many output tokens per active user as typical firms. That metric is not a price indicator. It does show why a flat AI budget becomes unfit for purpose as agent use grows.

Model prices alone are therefore not enough for management. Three questions matter: Which business process causes the call? Which role or application calls the model? And which metric justifies the expense—for example, cases handled, cycle time reduced, or rework avoided?

A practical starting point for DACH companies

Do not begin with a dashboard programme for every team. Pick one productive Bedrock workflow, enable IAM-principal data in the CUR 2.0 export, and define two or three mandatory tags such as cost centre, product, and environment. Then assign a business budget owner.

Importantly, IAM identities are technical evidence, not a complete cost model. Roles, service accounts, and shared platforms must be mapped cleanly to products and responsibilities. Organisations that establish this attribution early can scale agents without turning an innovation budget into an unexplained pooled expense.

← Back to the blog