How do I find which service is burning my Bedrock TPM quota?+
BedrockOps attributes tokens-per-minute consumption to the caller identity and workload behind each InvokeModel call, then ranks callers by burn over the selected window. CloudWatch reports EstimatedTPMQuotaUsage for the account and model; BedrockOps reports which application, role or workload produced it.
What is the difference between 429 and 503 errors in Amazon Bedrock?+
A 429 ThrottlingException means your request exceeded a quota you own, usually tokens or requests per minute for that model and region. A 503 ServiceUnavailable means the service side could not serve the request. The remediation differs: 429 means fix client concurrency, spread load with cross-region inference, or raise the quota; 503 means back off, retry with jitter, and fail over.
Why did my Bedrock Knowledge Base sync fail?+
Ingestion jobs usually fail on a subset of documents rather than the whole data source: unsupported formats, oversized files, encoding problems, permission errors on the S3 prefix, or embedding calls that were themselves throttled. BedrockOps groups failed documents by failure reason and links the ingestion job to the retrieval quality change it caused.
Is BedrockOps a Bedrock dashboard?+
No. BedrockOps is built for explanation, not for raw dashboarding. CloudWatch generative AI observability is the right place for Bedrock metrics, traces and token usage. BedrockOps consumes that layer and adds attribution, cross-signal correlation, ranked cause and Knowledge Base release control.
What is a Bedrock retry storm, and how do I detect retry amplification?+
A retry storm happens when a client SDK retries throttled requests aggressively, so each throttled call generates several more, which consume more quota and produce more throttling. The signature is a retry-to-request ratio well above 1 concentrated in one caller while the underlying request rate is flat. BedrockOps measures that ratio per caller and flags amplification.
Can I compare a candidate Knowledge Base to the live one before promoting it?+
Yes. BedrockOps runs the candidate and the live Knowledge Base against the same probe set and reports retrieval-quality scores, zero-result rate and tenant isolation results side by side. Promotion is recorded with an owner, a timestamp and the comparison evidence, and the previous Knowledge Base stays available for rollback.
Does BedrockOps require an in-path proxy?+
No. There is no in-path proxy and no traffic reroute. BedrockOps reads signals from your account and never sits in the request path of a production Bedrock call.
What AWS permissions does BedrockOps need?+
A cross-account IAM role with read-only permissions, assumed by BedrockOps with an external ID. It reads Bedrock runtime and Knowledge Base signals, quota and throttling data, and deployment events. There are no write permissions and no changes to your Bedrock configuration.
Where is customer data stored?+
Customer operational data stays in Europe today, and the product is delivered entirely on AWS. Broader regional coverage will come in later versions.
How much does BedrockOps cost, and how do I buy it?+
A 7-day trial is $0. Production is $199 per month, or $159 per month billed annually, and includes 3 AWS accounts and 10 Knowledge Bases. Overage is $49 per extra account and $10 per extra Knowledge Base. Enterprise pricing is custom — contact us. Everything starts and bills through AWS Marketplace, with a customer-set monthly spend cap.