Bedrock per-tenant cost attribution: inference profiles vs STS sessions vs requestMetadata

rahulladumor · reddit · 2026-10-20

A hands-on breakdown of attributing Bedrock spend per tenant when a gateway calls through a single IAM role. Three options answer different questions: (1) tagged inference profiles flow to Cost Explorer/CUR but each profile binds one model, so combinations multiply; (2) per-tenant STS session names appear in both invocation logs and CUR 2.0's lineitemiamprincipal, enabling daily per-tenant reconciliation; (3) requestMetadata gives per-request token counts priced with your own rate card — an estimate written to logs, not the bill. Billing data lands up to 24h late, tags aren't retroactive, and nothing stops spend: budgets and rate limits must live in the gateway's request path. CloudWatch token metrics only offer model-level dimensions.

Original post →

More from coding & agent

coding & agent channel →