Overview
MCP and Agentic Chat for AI Cost Governance and CFM Governance on AWS
Every governance role has questions only their data can answer. A FinOps Lead needs to know which Bedrock models are generating allocation gaps. A Product Owner needs to understand why their AI workload was flagged and what approval they need. A Portfolio Owner needs their AI Governance Scorecard before the investment review.
Agent Bill answers these questions in real time and acts on them. This is not a general-purpose AI assistant. Agent Bill is a purpose-built governance agent with role-scoped access, 25 MCP tools exposing FinOps Center processes, and execution capability that routes actions to the right system: remediation to the FinOps Lead workflow, engineer tasks to Jira, approval requests to the Portfolio Owner gate.
Agent Bill requires an active FinOps Center subscription.
Built on AWS-Native Agentic Infrastructure
Amazon Bedrock AgentCore Runtime: orchestrates MCP tool execution across FinOps Center governance processes Amazon Bedrock AgentCore Identity: OAuth 2.0 user-scoped authentication enforcing role-based access at the identity layer Amazon Quick: embedded conversational interface with curated Topics per governance persona QuickSight datasets and Athena queries: curated, role-aware data access with no raw query exposure
AI Cost Governance Queries
Which models are generating the highest unattributed cost this month? Which workloads have open allocation gaps by category? What is our AI Governance Scorecard maturity level across the portfolio? Which AgentCore workloads are missing business case approval?
CFM Governance Queries
What is the CFM Scoreboard grade for my portfolio this quarter? Which estimates are approaching the approval gate threshold? What is our MAP compliance rate and which resources are at risk? Which Savings Plans are expiring in the next 90 days?
Actions Agent Bill Takes
Route allocation gap remediation to FinOps Lead workflow Create and assign Cloud Engineer tasks in Jira Trigger model approval request to Portfolio Owner Flag unclaimed AI allocations for business case creation
Role-Aware by Design
Every Agent Bill session is scoped to the authenticated user's IAM identity and financial scope. A Product Owner sees their workloads. A FinOps Lead sees their portfolio. A Portfolio Owner sees their business unit. No cross-scope data exposure between personas.
Prerequisites and Deployment
Prerequisites:
Active FinOps Center subscription (Growth, Standard, or Enterprise) Amazon Quick Professional license per Agent Bill user (additional cost, sourced separately from AWS) Amazon Bedrock access enabled in your deployment region Amazon QuickSight available in your deployment region
Amazon Quick Professional licenses are assigned to users during Agent Bill persona configuration. This license is not included in the Agent Bill subscription and is billed directly by AWS.
Deployment: Deployed via CloudFormation into your AWS estate alongside FinOps Center. No data leaves your AWS account boundary.
Security and Data Residency
All data remains within your AWS account boundary. Agent Bill sessions are authenticated via Amazon Bedrock AgentCore Identity using OAuth 2.0. Role-based access is enforced at the IAM identity layer. No cross-scope data exposure between personas.
Pricing
Agent Bill uses metered pricing. See the Pricing tab for current dimensions and rates. An active FinOps Center subscription (Growth, Standard, or Enterprise) and Amazon Quick Professional licenses per user are prerequisites and billed separately.
About Cloud Scal3 Inc.
Cloud Scal3 builds AWS-native products that close visibility, governance, and execution gaps in AI cost and Cloud Financial Management for business stakeholders. AWS Technology Partner and ISV Accelerate participant. Products deploy entirely within your AWS estate.
Get Started
Book a guided Agent Bill walkthrough at cloudscal3.com or contact the team to discuss your governance personas and deployment.
Highlights
- 25 MCP tools expose FinOps Center AI Cost Governance and CFM Governance processes via Amazon Bedrock AgentCore Runtime. Every session is scoped to the authenticated user's IAM identity and financial scope: Product Owner, FinOps Lead, Portfolio Owner, Cloud Engineer. No cross-scope data exposure.
- Agent Bill acts, not just answers. Allocation gap remediation routes to the FinOps Lead workflow. Cloud Engineer tasks go to Jira. Model approval requests go to the Portfolio Owner gate. Governance execution from natural language, scoped per persona, replacing manual triage and routing across your governance cycle.
- Deployed via CloudFormation into your AWS estate. All data stays within your account boundary. Authentication via Amazon Bedrock AgentCore Identity with OAuth 2.0. Requires an active FinOps Center subscription and one Amazon Quick Professional license per user (billed separately by AWS)
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
No Refunds
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This is the initial Release of Amazon Q in QuickSight FinOps Center Framework
Topics Created
AWS Product AWS Portfolio AWS Department AWS Business Unit AWS Spending AWS Vendor
DataSet Created FinOps_Center_E1 FinOps_Center_E2 FinOps_Center_E3 FinOps_Center_E4 FinOps_Center_Full Resource View finopscenter_period
Additional details
Usage instructions
Installation of FinOps Center has 3 steps. Step 1 is the configurations of services in customers’ AWS Estate and creations/validation of the CloudOps account as documented in https://docs.finopscenter.com/docs/aws-environment . Once these pre-requisites are complete, customers will install their FinOps Center subscription from the Marketplace in steps 2 & 3. Upon subscripting to the software, Customers will choose to Configure the software from Amazon Machine Image from the drops down and continue through the following page selecting the version and region which you would like to install. On the Launch this Software screen, customers will Select Launch through EC2. Prior to Launching AMI we recommend navigating to IAM in the account and create the IAM role documented on https://docs.finopscenter.com/docs/marketplace-install to be used when launching the instance. As the EC2 instance comes online, navigate to S3 and wait for the bucket – cdk – hnb659fds-assets-<accountnumber>-us-east-1 to appear. Once the bucket is in S3, navigate back to Subscription Management Screen and launch the CloudFormation Script to configure your FinOps Center with the Parameters for your environment again following the instructions at https://docs.finopscenter.com/docs/information-needed-for-install .
Resources
Vendor resources
Support
Vendor support
Cloud Scal3 provides support for Agent Bill covering deployment, persona configuration, MCP tool setup, and troubleshooting.
Support Channel: https://www.cloudscal3.com/support
Response Time: Up to 24 hours for initial response.
Support Scope:
CloudFormation deployment and AWS prerequisite configuration Amazon Bedrock AgentCore Runtime and Identity setup MCP tool configuration and persona scoping Amazon Quick Topics configuration per governance role Jira integration for Cloud Engineer task routing FinOps Center subscription prerequisite validation
Pre-Purchase: Book a walkthrough or discuss your governance personas via https://www.cloudscal3.com/support
Refunds: Submit a support ticket with your subscription details and reason for the request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

