View a markdown version of this page

Amazon Bedrock - Resource Tagging - AWS Partner Revenue Measurement
Understanding inference profilesPrerequisitesTagging an application inference profileListing application inference profiles

Amazon Bedrock - Resource Tagging

Amazon Bedrock uses application inference profiles as the taggable resource for Partner Revenue Measurement. You must create an application inference profile, tag it with the aws-apn-id tag, and then use that profile for all model invocations.

Understanding inference profiles

An inference profile is an Amazon Bedrock resource that specifies a foundation model and its associated AWS Regions for model invocation. Inference profiles enable cost management and resource measurement through cost allocation tags.

Amazon Bedrock offers the following types of inference profiles:

  • Cross-region (system-defined) inference profiles – Predefined profiles that include multiple Regions to which requests for a model can be routed.

  • Application inference profiles – User-created profiles to measure costs and model usage. You can create a profile that routes requests to one Region or to multiple Regions.

Warning

System-defined inference profiles do not support tagging. While system-defined (cross-region) inference profiles enhance flexibility in model usage by routing requests across multiple Regions, they do not support attaching custom tags for measuring, managing, and controlling costs across workloads and tenants. Only application inference profiles support the aws-apn-id tag required for Partner Revenue Measurement attribution. You must create an application inference profile to use Resource Tagging with Amazon Bedrock.

Prerequisites

  • Access to supported foundation models through the Amazon Bedrock console or API.

  • Your IAM role must have access to inference profile API actions. If your role has the AmazonBedrockFullAccess managed policy attached, you can skip this step. Otherwise, create a policy with the following permissions:

    {
  "Version": "2012-10-17", 
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "bedrock:InvokeModel*",
        "bedrock:CreateInferenceProfile"
      ],
      "Resource": [
        "arn:aws:bedrock:*::foundation-model/*",
        "arn:aws:bedrock:*:*:inference-profile/*",
        "arn:aws:bedrock:*:*:application-inference-profile/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "bedrock:GetInferenceProfile",
        "bedrock:ListInferenceProfiles",
        "bedrock:DeleteInferenceProfile",
        "bedrock:TagResource",
        "bedrock:UntagResource",
        "bedrock:ListTagsForResource"
      ],
      "Resource": [
        "arn:aws:bedrock:*:*:inference-profile/*",
        "arn:aws:bedrock:*:*:application-inference-profile/*"
      ]
    }
  ]
}

Tagging an application inference profile

Follow these steps to create and tag an application inference profile using the AWS CLI.

Note

The tag value must use the format pc:product-code, where product-code is your AWS Marketplace product code. To retrieve your product code, see Product Code Retrieval. Do NOT use the Product ID or UUID formatted product ID.

  1. Create an application inference profile.

    aws bedrock create-inference-profile \
  --inference-profile-name "my-partner-inference-profile" \
  --model-source "copyFrom=arn:aws:bedrock:us-east-1:123456789012:inference-profile/us.amazon.nova-pro-v1:0"

    Replace the Region, account ID, and inference profile ID with your values. The model source uses a copyFrom parameter that references a system-defined inference profile.

    The output returns the inference profile ARN and status:

    {
  "inferenceProfileArn": "arn:aws:bedrock:us-east-1:123456789012:application-inference-profile/k1c3lwu20lem",
  "status": "ACTIVE"
}

  2. Tag the inference profile with your partner identifier.

    aws bedrock tag-resource \
  --resource-arn "arn:aws:bedrock:us-east-1:123456789012:application-inference-profile/k1c3lwu20lem" \
  --tags Key=aws-apn-id,Value=pc:5ugbbrmu7ud3u5hsipfzug61p

    Use the ARN from the previous step. Replace 5ugbbrmu7ud3u5hsipfzug61p with your AWS Marketplace product code. For details on the tag format, see Resource Tagging.

  3. Verify the tag.

    aws bedrock list-tags-for-resource \
  --resource-arn "arn:aws:bedrock:us-east-1:123456789012:application-inference-profile/k1c3lwu20lem"

    The output confirms the tag:

    {
  "tags": [
    {
      "key": "aws-apn-id",
      "value": "pc:5ugbbrmu7ud3u5hsipfzug61p"
    }
  ]
}
Important

All subsequent model invocations must use the tagged application inference profile ARN to ensure proper Partner Revenue Measurement attribution.

Listing application inference profiles

To list all application inference profiles in your account:

aws bedrock list-inference-profiles --type-equals "APPLICATION"

To get details for a specific profile:

aws bedrock get-inference-profile \
  --inference-profile-identifier "inference-profile-id"