Cline with Amazon Bedrock で始める Vibe Coding ~ テックアカデミーにおける活用事例

$ aws bedrock create-inference-profile \
--inference-profile-name 'bedrock-claude-inference-profile' \
--description 'Bedrock Claude inference profile example' \
--model-source '{"copyFrom": "arn:aws:bedrock:ap-northeast-1:{accountId}:inference-profile/apac.anthropic.claude-sonnet-4-20250514-v1:0"}' \
--tags '[{"key": "userName","value": "handa"},{"key": "teamName","value": "teamX"}]'

$ aws bedrock list-inference-profiles --type-equals 'APPLICATION'

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "bedrock:InvokeModel*",
            "Resource": "arn:aws:bedrock:ap-northeast-1:{accountId}:application-inference-profile/*",
            "Effect": "Allow"
        },
        {
            "Condition": {
                "ArnLike": {
                    "bedrock:InferenceProfileArn": "arn:aws:bedrock:ap-northeast-1:{accountId}:application-inference-profile/*"
                }
            },
            "Action": "bedrock:InvokeModel*",
            "Resource": "arn:aws:bedrock:*::foundation-model/anthropic.claude-sonnet-4-20250514-v1:0",
            "Effect": "Allow"
        }
    ]
}

# バージョン確認
aws --version

# AWS CLI v2 がインストールされていない場合は以下から取得
# https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html

# SSO の設定を開始
aws configure sso

--------------------------------------------------

# プロンプトへの回答
SSO session name (Recommended): bedrock-cline-session
SSO start URL [None]: https://[your-domain].awsapps.com/start
SSO region [None]: ap-northeast-1
SSO registration scopes [sso:account:access]: # Enter

# ブラウザで認証後
CLI default client Region [None]: ap-northeast-1
CLI default output format [None]: json
CLI profile name [...]: bedrock-cline-profile  # この名前が重要

import json
import boto3
import os
import time
import re
from datetime import datetime, timedelta

def lambda_handler(event, context):

    # ロググループ名
    LOG_GROUP_NAME = os.environ.get("LOG_GROUP_NAME", "/aws/bedrock/invoke-model")

    # 料金テーブル
    PRICE_TABLE = json.loads(os.environ.get("PRICE_TABLE"))
    """料金は頻繁に変更されるため、必ず最新の AWS Pricing ページを参照してください。"""

    # CloudWatch Logs クライアントの初期化
    logs_client = boto3.client("logs")

    # 現在時刻から1時間前までのログを取得対象とする
    end_time = datetime.now()
    start_time = end_time - timedelta(hours=1)

    # CloudWatch Logs Insights クエリの実行
    query = """
        fields @timestamp, identity.arn, modelId, input.inputTokenCount, input.cacheReadInputTokenCount, input.cacheWriteInputTokenCount, output.outputTokenCount
        | filter schemaType = "ModelInvocationLog"
        | stats 
            sum(input.inputTokenCount) as total_input_tokens,
            sum(input.cacheReadInputTokenCount) as total_cache_read_input_tokens,
            sum(input.cacheWriteInputTokenCount) as total_cache_write_input_tokens,
            sum(output.outputTokenCount) as total_output_tokens
            by identity.arn, modelId
    """

    response = logs_client.start_query(
        logGroupName=LOG_GROUP_NAME,
        startTime=int(start_time.timestamp()),
        endTime=int(end_time.timestamp()),
        queryString=query,
    )

    query_id = response["queryId"]

    # クエリ結果の取得（最大30秒待機）
    result_response = None
    for _ in range(30):
        time.sleep(1)
        result_response = logs_client.get_query_results(queryId=query_id)
        if result_response["status"] in [
            "Complete",
            "Failed",
            "Cancelled",
            "Timeout",
            "Unknown",
        ]:
            break

    # クエリ結果の解析処理
    for result in result_response["results"]:
        user_arn = None
        model_id = None
        total_input_tokens = 0
        total_cache_read_input_tokens = 0
        total_cache_write_input_tokens = 0
        total_output_tokens = 0

        for field in result:
            if field["field"] == "identity.arn":
                user_arn = field["value"]
                # SSO の assumed-role ARN からユーザー名を抽出
                # 例: arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_BedrockClineAccessPermissionSet_xxxxx/bedrock-claude-user
                match = re.search(r'/([^/]+)$', user_arn)
                if match:
                    user_name = match.group(1)
                else:
                    user_name = user_arn
            elif field["field"] == "modelId":
                model_id = field["value"]
            elif field["field"] == "total_input_tokens":
                total_input_tokens = int(field["value"])
            elif field["field"] == "total_cache_read_input_tokens":
                total_cache_read_input_tokens = int(field["value"])
            elif field["field"] == "total_cache_write_input_tokens":
                total_cache_write_input_tokens = int(field["value"])
            elif field["field"] == "total_output_tokens":
                total_output_tokens = int(field["value"])

        # コスト計算
        input_cost = (total_input_tokens / 1000) * PRICE_TABLE["inputPrice"]
        output_cost = (total_output_tokens / 1000) * PRICE_TABLE["outputPrice"]
        cache_read_input_cost = (total_cache_read_input_tokens / 1000) * PRICE_TABLE["cacheReadPrice"]
        cache_write_input_cost = (total_cache_write_input_tokens / 1000) * PRICE_TABLE["cacheWritePrice"]

        total_cost = (input_cost + output_cost + cache_read_input_cost + cache_write_input_cost)

        print(f"User: {user_name}, Model ID: {model_id}, Total Cost: ${total_cost:.4f}")

        # 【ユースケースに応じて、コストを記録をしたり、通知を送信する処理を追加できます。】

    return {
        "statusCode": 200,
        "body": json.dumps(
            {
                "message": "Bedrock model invocation monitoring completed successfully.",
            }
        ),
    }

# Profile の削除
aws configure delete-profile --profile bedrock-cline-profile

# または手動で編集
vi ~/.aws/config
# [profile bedrock-cline-profile] セクションを削除

# SSO セッションの削除（オプション）
# [sso-session bedrock-cline-session] セクションも削除可能