Product Owner
Their product's costs, AI spending, container efficiency.
Accept spend cards, submit budgets, track estimates.
Agent BillAsk a question in plain English. Get an answer. Take action. No dashboards to navigate. No SQL to write. No tickets to file. Agent Bill combines real-time cloud cost intelligence with the ability to approve budgets, accept spending, and action recommendations — all through a single conversational interface embedded directly in your FinOps Center experience.
They can answer questions. They can't act on the answers.
Agent Bill is the conversational layer of FinOps Center — and it doesn't just talk. It approves budgets. It accepts spend cards. It actions recommendations. It manages credits. All through the same governance layer that powers the FinOps Center UI.
Real-time intelligence. Real action. All inside your AWS account.
Every person sees the cloud differently. Agent Bill adapts to all of them. Identity in Amazon Cognito determines the persona, the data scope, and the actions available — no user configuration required.
Their product's costs, AI spending, container efficiency.
Accept spend cards, submit budgets, track estimates.
All products across their portfolio.
Approve budgets, approve spending, review variances.
Portfolio and product rollups across their department.
Monitor trends, escalate to FinOps.
Full BU cost visibility.
Executive-level spend summaries.
Entire organization — every account, every dollar.
Full action suite: recommendations, credits, budgets, savings plans.
“What's my cost this month?”
Your HR Portal product is at $8,420 month-to-date — 14% under your $9,800 estimate with 7 days to go. Your AI spend is $1,200 of that, with a healthy 64% cache hit rate. One Cloud Spend Card is awaiting your review for week ending April 6.
A purpose-built MCP (Model Context Protocol) server hosted on Amazon Bedrock AgentCore Runtime connects Agent Bill to the FinOps Center AppSync GraphQL API. Every action routes through the same Cognito authentication, field-level access control, and approval chain as the FinOps Center UI. When Agent Bill approves a budget — it's the same governed workflow, triggered conversationally.
Authentication flows through Amazon Cognito — no separate login, no API keys, no standing access. Agent Bill inherits the user's session and validates every action against the same field-level authorization policies enforced by FinOps Center.
Each role gets their own Amazon Quick Space — scoped to their hierarchy, data, and actions. These are actual Agent Bill conversations against live FinOps Center data.

Five purpose-built Amazon QuickSight Q Topics, each powered by CUR 2.0 data through Athena. Agent Bill routes every question to the right topic automatically — no user configuration, no topic selection, no ambiguity.
Row-Level Security ensures every user sees only the data they own — enforced at the dataset level.
Agent Bill's five Q Topics are built on Amazon Athena views over your CUR 2.0 export — processed entirely within your AWS environment. No third-party platform. No SaaS ingestion pipeline. No copy of your billing data sitting outside your control.
Delivered to S3 in your account, with IAM principal allocation enabled for AI workload attribution.
Automatically catalogs new CUR deliveries and schema changes, including the line_item_iam_principal column.
Query engine for all cost calculations. Views maintained per organizational level (E1/E2/E3/E4) with role-appropriate column projection.
One dataset per role level, each with its own SPICE schedule and Row-Level Security configuration.
Enforced via the user_mapping table. Every dataset filters to the user's assigned organizational scope before any query is served.
Coverage Rate, Utilization Rate, Cache Hit Rate, AI Cost, SP Savings Amount — computed in the dataset layer, not left to QuickSight defaults.
SELECT line_item_iam_principal,
COUNT(*) AS invocations,
SUM(line_item_unblended_cost) AS total_cost
FROM cid_cur2
WHERE line_item_product_code = 'AmazonBedrock'
AND line_item_iam_principal IS NOT NULL
GROUP BY line_item_iam_principalWhen this returns IAM role ARNs against Bedrock rows, your AI workloads are being attributed correctly — automatically, before Agent Bill ever sees the data.
Delivered as an embedded QuickSight QuickChat experience. The right role, data scope, and action permissions load automatically from the user's Cognito identity — no separate application, no new login.
Embedded QuickChat in every dashboard. No new login.
Native QuickSight Slack integration.
Native QuickSight Teams integration.
Same conversational experience, on the go.
They can answer questions. They can't do anything about the answers. Agent Bill is different in three ways.
Approve a $4,200 Savings Plan. Accept a Cloud Spend Card. Apply a MAP tag. Every action routes through the same governed workflow as the FinOps Center UI — no separate tool, no ticket, no console.
Your CUR data, your hierarchy, your user identities — none of it touches an external platform. Authorization enforces through your own Cognito and AppSync stack. This isn't a promise. It's the architecture.
A Product Owner asking “what's my cost?” should get their product's cost — not a company-wide number to filter down themselves. Agent Bill's persona and Row-Level Security system handles that automatically. From the moment the chat opens.
Agent Bill is the Ask layer of the suite. See in FinOps Center. Ask Agent Bill. Act through CloudScal3 Tools — without leaving the conversation.
The control plane. Spend governance, Cost Saving Report Card, AI MAP lifecycle, and role-based visibility across every team.
Learn more →AskThe conversational layer. Bedrock AgentCore + Amazon QuickSuite, with role-scoped answers grounded in your AWS data.
Learn more →ActThe execution layer. Non-technical teams buy Savings Plans, apply MAP tags, and stop non-prod resources within Control Tower guardrails.
Learn more →Agent Bill ships with FinOps Center on AWS Marketplace. CloudFormation-based deployment — no manual infrastructure setup, no professional services engagement to get started.
Agent Bill ships with every FinOps Center deployment. No separate purchase, no separate setup.