SShortSingh.
Back to feed

Five-stage model for controlling Amazon Bedrock costs through governance, not price

0
·3 views

A DEV Community article argues that high Amazon Bedrock bills stem from weak governance rather than model pricing, so teams need to track which team, app, or agent run incurred each charge. It presents a five-stage operating loop, starting with per-user attribution via session tags, since a shared gateway role hides spending ownership. It notes that billing reports lag about a day, so request-level invocation logs with consistent metadata are needed for faster visibility. The piece describes three enforcement tiers, from alerts-only to IAM deny policies to a gateway returning 429 errors, with the choice depending on how quickly spending can escalate. It concludes that cost control for generative AI is a shared architectural discipline between FinOps and platform engineering, requiring regular reviews.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Closed-source and open-source AI weigh control, cost, and performance trade-offs

A practical overview examines the divide between closed-source and open-source AI models and what each approach means for users. Commercial systems such as those from OpenAI and Google are praised for strong performance and polished tooling, but they are criticized for limited transparency, high costs, and restrictive licensing. Open-source projects, including Gemma, offer local deployment, customization, and freedom from cloud dependence, though they face hurdles in performance, scalability, and ease of use. The article also cites community discussion suggesting that open models could become much cheaper through optimization and better memory management. Overall, it frames the choice as a trade-off between convenience and reliability on one side and transparency and control on the other.

0
ProgrammingDEV Community ·

Oracle Cloud Adds Google TPUs Alongside GPUs and Custom Chips, Forcing Data Center Shifts

Oracle Cloud Infrastructure has started offering Google Cloud Tensor Processing Units next to its existing GPUs and its own custom AI accelerators. Customers can provision TPU v5e pods through OCI for large training jobs and send inference workloads to Oracle's inference-focused chips, without managing separate accounts with multiple providers. The move pushes data center operators away from uniform single-vendor racks toward mixed hardware with different interconnects, memory bandwidth, and power and thermal requirements. Operators must update schedulers, cooling, power, and network fabrics, while software teams maintain multiple code paths, which adds engineering overhead but allows finer workload-to-hardware matching.

0
ProgrammingDEV Community ·

Researchers Show ChatGPT Share Link Could Hijack Signed-In Accounts; OpenAI Patched It

Security firm Parameter published a writeup on October 28 describing how an ordinary public ChatGPT share link, opened once by a logged-in user, could run attacker-controlled JavaScript within that user's session. The flaw combined several features that were each defensible alone: a sandboxed Preview feature, an interactive graph loading the MathLive library, and a postMessage listener that did not verify its sender. Chained together, these gaps let injected HTML escape the sandbox and execute as chatgpt.com, bypassing the content security policy with help from a YouTube endpoint on its allowlist. OpenAI rated the report P1, paid a $5,000 bounty, and shipped a fix on October 26, eight days after the report was filed on October 18. Parameter says it tested the exploit only between its own accounts, and there is no evidence of real-world exploitation, nor do users need to take any action.

0
ProgrammingDEV Community ·

Food-scanning app keeps four region options, but region only changes disclaimer wording

A developer describes Munchable, an Expo-based React Native app that scans packaged foods for gut-condition fit. Onboarding asks users to pick one of four regions: United States, United Kingdom, European Union, or 'Somewhere else'. The chosen region does not reach the rules engine, so it alters only the phrasing of a medical-disclaimer line, not how labels are read. The author concedes that onboarding copy promising tailored label rules was inaccurate and should be corrected. The four-option design is deliberate, reflecting only the legal regimes the team has actually reviewed rather than all 195 countries.