
Free Lesson
How $47.53 of Bedrock calls got past me, and the fix
45 min
Nov 20, 2026 12:00 PM
By continuing, you agree to Maven's Terms and Privacy Policy.
What you'll learn
See the real bill
Two runs in August 2026: $14.45 for Haiku 4.5 and $33.08 for Sonnet 4.6, from AWS Cost Explorer.
See why nothing caught it
An agent typed a paid flag on a script. Bedrock calls through boto3 have no hostname, so my hook did not see them.
Copy the guards I added
A flag that the script needs before it spends money, and an IAM deny on the role. I show both.
Why this topic matters
In August 2026 two agent sessions spent $47.53 on Amazon Bedrock that I did not approve. The amount is small, but nothing stopped it. In 45 minutes I show the bill, why my checks did not see it, and the guards I added. At the end I tell you about the one-day workshop where you put an agent on AWS with a cost limit.





