# Amazon Bedrock - Resource Tagging
<a name="bedrock-best-practices"></a>

Amazon Bedrock uses *application inference profiles* as the taggable resource for Partner Revenue Measurement. You must create an application inference profile, tag it with the `aws-apn-id` tag, and then use that profile for all model invocations.

## Understanding inference profiles
<a name="bedrock-inference-profiles"></a>

An inference profile is an Amazon Bedrock resource that specifies a foundation model and its associated AWS Regions for model invocation. Inference profiles enable cost management and resource measurement through cost allocation tags.

Amazon Bedrock offers the following types of inference profiles:
+ **Cross-region (system-defined) inference profiles** – Predefined profiles that include multiple Regions to which requests for a model can be routed.
+ **Application inference profiles** – User-created profiles to measure costs and model usage. You can create a profile that routes requests to one Region or to multiple Regions.

**Warning**  
**System-defined inference profiles do not support tagging.** While system-defined (cross-region) inference profiles enhance flexibility in model usage by routing requests across multiple Regions, they do not support attaching custom tags for measuring, managing, and controlling costs across workloads and tenants. Only **application inference profiles** support the `aws-apn-id` tag required for Partner Revenue Measurement attribution. You must create an application inference profile to use Resource Tagging with Amazon Bedrock.

## Prerequisites
<a name="bedrock-prerequisites"></a>
+ Access to supported foundation models through the Amazon Bedrock console or API.
+ Your IAM role must have access to inference profile API actions. If your role has the `AmazonBedrockFullAccess` managed policy attached, you can skip this step. Otherwise, create a policy with the following permissions:

  ```
  {
    "Version": "2012-10-17", 		 	 	 
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "bedrock:InvokeModel*",
          "bedrock:CreateInferenceProfile"
        ],
        "Resource": [
          "arn:aws:bedrock:*::foundation-model/*",
          "arn:aws:bedrock:*:*:inference-profile/*",
          "arn:aws:bedrock:*:*:application-inference-profile/*"
        ]
      },
      {
        "Effect": "Allow",
        "Action": [
          "bedrock:GetInferenceProfile",
          "bedrock:ListInferenceProfiles",
          "bedrock:DeleteInferenceProfile",
          "bedrock:TagResource",
          "bedrock:UntagResource",
          "bedrock:ListTagsForResource"
        ],
        "Resource": [
          "arn:aws:bedrock:*:*:inference-profile/*",
          "arn:aws:bedrock:*:*:application-inference-profile/*"
        ]
      }
    ]
  }
  ```

## Tagging an application inference profile
<a name="bedrock-tagging-steps"></a>

Follow these steps to create and tag an application inference profile using the AWS CLI.

**Note**  
The tag value must use the format `pc:{{product-code}}`, where `{{product-code}}` is your AWS Marketplace product code. To retrieve your product code, see [Product Code Retrieval](product-code-retrieval.md). Do **NOT** use the Product ID or UUID formatted product ID.

1. **Create an application inference profile.**

   ```
   aws bedrock create-inference-profile \
     --inference-profile-name "my-partner-inference-profile" \
     --model-source "copyFrom=arn:aws:bedrock:us-east-1:{{123456789012}}:inference-profile/us.amazon.nova-pro-v1:0"
   ```

   Replace the Region, account ID, and inference profile ID with your values. The model source uses a `copyFrom` parameter that references a system-defined inference profile.

   The output returns the inference profile ARN and status:

   ```
   {
     "inferenceProfileArn": "arn:aws:bedrock:us-east-1:{{123456789012}}:application-inference-profile/{{k1c3lwu20lem}}",
     "status": "ACTIVE"
   }
   ```

1. **Tag the inference profile with your partner identifier.**

   ```
   aws bedrock tag-resource \
     --resource-arn "arn:aws:bedrock:us-east-1:{{123456789012}}:application-inference-profile/{{k1c3lwu20lem}}" \
     --tags Key=aws-apn-id,Value=pc:{{5ugbbrmu7ud3u5hsipfzug61p}}
   ```

   Use the ARN from the previous step. Replace `{{5ugbbrmu7ud3u5hsipfzug61p}}` with your AWS Marketplace product code. For details on the tag format, see [Resource Tagging](resource-tagging.md).

1. **Verify the tag.**

   ```
   aws bedrock list-tags-for-resource \
     --resource-arn "arn:aws:bedrock:us-east-1:{{123456789012}}:application-inference-profile/{{k1c3lwu20lem}}"
   ```

   The output confirms the tag:

   ```
   {
     "tags": [
       {
         "key": "aws-apn-id",
         "value": "pc:{{5ugbbrmu7ud3u5hsipfzug61p}}"
       }
     ]
   }
   ```

**Important**  
All subsequent model invocations must use the tagged application inference profile ARN to ensure proper Partner Revenue Measurement attribution.

## Listing application inference profiles
<a name="bedrock-listing-profiles"></a>

To list all application inference profiles in your account:

```
aws bedrock list-inference-profiles --type-equals "APPLICATION"
```

To get details for a specific profile:

```
aws bedrock get-inference-profile \
  --inference-profile-identifier "{{inference-profile-id}}"
```