Select End-User Persona View:
Gateway Parameters
AWS Bedrock Pricing Rates:
Input Tokens: $2.00 / 1M tokens
Output Tokens: $10.00 / 1M tokens
Security Context
STS Issuer: me-central-1 (UAE)
AssumeRole: UAE-Bedrock-Gateway-Role
SigV4 Token TTL: 3,600 sec (Short-lived)
Direct claude.ai: BLOCKED (Bypassed)
Claude Enterprise Inference Console
Connected via awsrouter.perfobserve.com
Welcome to the Enterprise AI Gateway Prototype. This interface enables users in geo-restricted regions (such as Hong Kong) to securely invoke Anthropic Claude via your parent UAE AWS account (me-central-1). Every request assumes the UAE-Bedrock-Gateway-Role via AWS STS and routes strictly across AWS's private infrastructure, bypassing consumer IP restrictions with full token and USD cost metering.
System Initialized • AWS Bedrock Runtime
1. Confirm UAE IAM Authorization
2. HKEx Market Intelligence
3. UAE-HK Compliance Comparison
4. Quant Option Pricing
Total Model Invocations
3
Across HK & UAE principals
Total Token Volume
3,590,000
Input: 2.89M / Output: 700K
Estimated Postpaid Cost (MTD)
$42.94
Net 30 Consolidated Billing
Daily Budget Guardrail
$100.00
42.9% consumed (Threshold OK)
Daily Usage Ledger (AWS Cost and Usage Report Format)
Download Daily Usage CSV
Date Region Origin IAM Principal Model ID Input Tokens Output Tokens Total Cost (USD) Status

Monthly Postpaid Settlement Statement (Net 30)

Consolidated Enterprise Billing • Issued to UAE Parent Entity (Payer Account ID: 481029482910)

Billing Period
Oct 01, 2026 – Oct 31, 2026
Parent Corporate Payer:
UAE Parent Technology Holdings LLC
ADGM Square, Al Maryah Island, Abu Dhabi, UAE
Tax Registration Number: 100492819200003
Invoicing & Payment Terms:
• Settlement Schedule: Postpaid Monthly (Net 30 days)
• Currency: USD (United States Dollars)
• Metering Source: AWS Cost and Usage Report (CUR) & Bedrock Runtime
Architecture & Geo-Restriction Resolution

Direct access to Anthropic Claude via web endpoints (claude.ai) is blocked in Hong Kong. Relying on consumer VPNs causes IP blacklisting and enterprise compliance breaches.

How Bedrock & IAM Solve This:
  • Zero Direct Web Access: Requests hit standard AWS Bedrock REST API endpoints rather than web frontends.
  • Identity-Centric Authorization: Access is evaluated against the UAE IAM Role (me-central-1), not client IP geolocation.
  • Temporary STS Credentials: Short-lived STS tokens (1 hour TTL) mean no long-lived keys reside in regional branch offices.
  • AWS Backbone Network: Traffic travels across AWS's private infrastructure directly to Bedrock cross-region inference profiles.
Procurement Mapping Summary
Customer Requirement Delivered Capability
IAM Accounts Delivery AWS Identity Center + Scoped IAM Roles
Model Scope (Opus & Sonnet) Claude 3.5 Sonnet & Claude 3/4 Opus
Actual Usage Billing On-demand token-based pricing
Daily Usage Reporting AWS Cost Explorer / CUR Daily CSV
Monthly Postpaid Settlement Consolidated Billing to UAE Parent (Net 30)
Infrastructure as Code (IAM Trust & Policies)
IAM Role Trust Policy (Allows UAE Parent Account STS AssumeRole): 
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::YOUR_UAE_ACCOUNT_ID:root"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}
Bedrock Claude Permissions Policy: 
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "bedrock:InvokeModel",
        "bedrock:InvokeModelWithResponseStream"
      ],
      "Resource": [
        "arn:aws:bedrock:*::foundation-model/anthropic.claude-*"
      ]
    }
  ]
}
CloudFormation Template Terraform Definition

Python boto3 Verification Test Runner

Executes test_bedrock_gateway.py to verify STS handshake and Claude model invocation in real time.

bash - python3 test_bedrock_gateway.py
Click "Run Verification Script" to execute the 4-step STS Bedrock verification handshake.