AWS published a script and event-driven CDK approach to activate Amazon Bedrock private-pricing entitlements across accounts in an organization.
AWS published two implementation paths for activating managed entitlements tied to Amazon Bedrock private pricing offers across multiple accounts. The guidance, dated October 13, 2026, addresses a step that can remain manual after an AWS Marketplace Private Pricing Offer is accepted: organization-level grants may be created but stay disabled until activated.
The first option is a standalone script for one-time activation. It lists received licenses and produces a dry-run plan for review before changes are applied. AWS cautions that this route has no seller allow-list, so it should be used only when the organization trusts every license received in its management account.
For ongoing processing, AWS outlines a CDK-deployed workflow in the AWS Organizations management account. An Amazon EventBridge rule listens for eligible Marketplace agreement events in us-east-1 and invokes an AWS Lambda function. The function checks the seller against a configured allow-list, locates the license, creates a distributed grant, and requests activation. Grants can target the full organization, selected organizational units, or specific accounts; CloudWatch Logs records activation attempts and skip decisions.
The negotiated price applies only after a grant reaches an active state. AWS recommends checking the grant in License Manager and validating covered Bedrock usage in Cost Explorer, while noting that billing data may take hours or days to appear. The CDK approach requires AWS Organizations with all features enabled and applies to License Manager-backed Bedrock model offers, not software-as-a-service products.
The two approaches serve different operational needs: a reviewed script for a one-off activation, or event-based automation for eligible future agreements. The seller allow-list is a key safeguard in the automated setup, because a matching seller can trigger grant creation across the configured targets.
