Skip to content

bedrock.md

Latest commit

 

History

History
112 lines (78 loc) · 4.06 KB

bedrock.md

File metadata and controls

112 lines (78 loc) · 4.06 KB
summary AWS Bedrock provider: Cost Explorer credentials, budget tracking, and usage display.
read_when
Setting up AWS Bedrock usage tracking
Debugging Bedrock Cost Explorer fetches
Updating Bedrock credentials, region, or budget handling

AWS Bedrock provider

CodexBar reads AWS Cost Explorer for Bedrock spend and can compare the current month against an optional budget.

Authentication

CodexBar supports two authentication modes, selected in Preferences → Providers → AWS Bedrock → Authentication.

Access keys (default)

Provide static AWS credentials through Settings or the environment inherited by CodexBar/the CLI:

export AWS_ACCESS_KEY_ID="..."
export AWS_SECRET_ACCESS_KEY="..."
export AWS_REGION="us-east-1"

Optional:

export AWS_SESSION_TOKEN="..."
export CODEXBAR_BEDROCK_BUDGET="250"

AWS profile

Resolve credentials from a named profile in ~/.aws/config / ~/.aws/credentials instead of pasting keys. Set the profile name in Settings (or via AWS_PROFILE). CodexBar shells out to the AWS CLI (aws configure export-credentials --profile <name>), so this works with SSO, assume-role, credential_process, and MFA-cached profiles — not just static credentials.

Requirements:

  • AWS CLI v2 on your PATH (CodexBar also checks /opt/homebrew/bin/aws, /usr/local/bin/aws, and ~/.local/bin/aws). Override the location with AWS_CLI_PATH if it lives elsewhere.
  • For SSO profiles, an active session (aws sso login --profile <name>). Credentials are resolved fresh on each refresh; the AWS CLI caches the SSO token, so this does not re-prompt unless the session has expired.

The profile's region is read automatically (aws configure get region); leave the Region field blank to use it, or set AWS_REGION / the Region field to override.

Relevant environment variables:

export CODEXBAR_BEDROCK_AUTH_MODE="profile"   # set automatically by Settings; "keys" or "profile"
export AWS_PROFILE="work"
export AWS_CLI_PATH="/opt/homebrew/bin/aws"   # optional override

The AWS identity (from either mode) must have permission to call Cost Explorer APIs, including ce:GetCostAndUsage.

Data source

  • Service: AWS Cost Explorer.
  • Region: AWS_REGION or AWS_DEFAULT_REGION, defaulting to us-east-1.
  • Usage: current-month Bedrock spend and historical daily cost buckets.
  • Budget: CODEXBAR_BEDROCK_BUDGET, when set to a positive dollar amount.
  • Test override: CODEXBAR_BEDROCK_API_URL replaces the Cost Explorer endpoint.

Display

  • Shows month-to-date Bedrock spend.
  • Shows budget progress when a budget is configured.
  • Reuses the shared inline dashboard for daily cost history when enough buckets are available.

CLI

codexbar --provider bedrock --source api
codexbar --provider bedrock --format json --pretty

Troubleshooting

"No AWS Bedrock cost data available"

  • Confirm the credentials are visible to CodexBar.
  • Confirm the AWS account has Cost Explorer enabled.
  • Confirm the IAM principal can call ce:GetCostAndUsage.
  • If using temporary credentials, include AWS_SESSION_TOKEN.
  • In profile mode, confirm the AWS CLI is installed (or set AWS_CLI_PATH) and that the profile name is correct.

"AWS profile session expired"

The profile's SSO/temporary session has expired. Run aws sso login --profile <name> (or refresh the underlying credentials) and retry.

"AWS CLI not found"

Profile mode requires AWS CLI v2. Install it (e.g. brew install awscli) or point CodexBar at the binary with AWS_CLI_PATH.

Wrong region

Set AWS_REGION or AWS_DEFAULT_REGION. Bedrock usage is regional, but Cost Explorer itself is account-level; CodexBar still needs a signing region for the request.

Key files

  • Sources/CodexBarCore/Providers/Bedrock/BedrockProviderDescriptor.swift
  • Sources/CodexBarCore/Providers/Bedrock/BedrockSettingsReader.swift
  • Sources/CodexBarCore/Providers/Bedrock/BedrockProfileCredentialProvider.swift
  • Sources/CodexBarCore/Providers/Bedrock/BedrockUsageStats.swift
  • Sources/CodexBarCore/Providers/Bedrock/BedrockAWSSigner.swift