Connect AWS and see your first finding in the same session.

Start the 7-day free trial on AWS Marketplace with no credit card, connect AWS with a read-only cross-account IAM role, and see a first runtime or Knowledge Base finding in the same session you connect — not after a long checklist.

Start 7-Day Trial On AWS Marketplace

Four steps from trial to first finding.

Start the 7-day trial

Start the 7-day free trial on AWS Marketplace — no credit card required.

Connect AWS (read-only)

One Quick-Create CloudFormation link provisions a read-only cross-account IAM role in your account — no customer-side runtime, no Lambda.

BedrockOps reads your AWS-native signals

Using the read-only role, BedrockOps reads Bedrock invocation logs, quota metrics, Knowledge Base state and ingestion logs, CloudTrail events, and inference profiles.

See the first finding, set an alert

Get a runtime or Knowledge Base finding in the same session, set your first alert rule, then continue on a paid plan through AWS Marketplace.

A scoped, verified, one-directional connection.

The connection is one read-only cross-account IAM role provisioned by CloudFormation — scoped to your tenant, verified on every use, and never in the path of a Bedrock call.

Scoped trust

A per-tenant External ID scopes the role

Each tenant gets its own server-generated External ID, required by the role trust policy alongside the BedrockOps principal allowlist. The value is embedded only in the Quick-Create link at onboarding and is never displayed afterwards.

Verified on every use

Confused-deputy verification on every assumption

After every AssumeRole, BedrockOps calls GetCallerIdentity to confirm the assumed account and iam:GetRole to verify the trust policy — a failed check aborts the assumption.

One-directional

Activity-sharded, read-only collection

Collection is sharded by activity — 1-min for active accounts, 5-min for quiet, 30-min for dormant — and data flows in one direction only: from your AWS account to BedrockOps.

Clear terms before you connect.

No credit card is required for the 7-day trial, and there is no direct web checkout — trial and billing run through AWS Marketplace.

Read-only by default — BedrockOps never sits in the request path and never proxies a Bedrock call.

Data stays in Europe today — SaaS-side compute runs in a single EU region, eu-west-3 (Paris), with EU-hosted Postgres and Redis.

Never an auto-upgrade — at the end of the 7-day trial the account transitions to read-only access until you subscribe.

Start the trial and connect AWS in the same sitting.

Start the 7-day trial on AWS Marketplace, connect AWS with a read-only cross-account IAM role, and get a runtime or Knowledge Base finding in the same session.

Start 7-Day Trial On AWS Marketplace