Amazon Bedrock, AWS Cloud Development Kit (AWS CDK), Lambda, API Gateway, andAmazon CloudWatch work in conjunction to help you run your workloads efficiently while gaining insights into your operations effectively. Take for instance AWS CDK, which codifies all cloud resources through an infrastructure-as-code (IaC) approach. Using an IaC approach helps ensure that all changes to the environment are controlled and logged, preventing untested changes from making it into production and ensuring that any operator can readily  determine the current state of the production system. Moreover, Amazon Bedrock and Lambda both provide serverless compute, without any requirement to upgrade or patch virtual machine images or operating system versions. In addition, the Lambda integration with CloudWatch logs ensures that application logs are stored and searchable without any additional infrastructure required. Metrics from CloudWatch can be used to set appropriate rate limits for clients during normal operation and to prevent abuse and anomalous operations. Finally, API Gateway provides many capabilities to facilitate hosting a production-grade API, such as granular rate-limiting controls to ensure a consistent quality of service for all users.

In this Guidance, configuring AWS Identity and Access Management (IAM) and Amazon Cognito can protect your data, systems, and assets in a number of ways that improves your security posture. Specifically, IAM integrates with Lambda, allowing application code running in Lambda to authenticate with other services, like Amazon Rekognition and Amazon Bedrock,without requiring long-lived credentials to be stored anywhere. Furthermore, API Gateway provides a robust outer authentication boundary, without requiring any custom authentication logic. API Gateway also supports multiple authentication mechanisms, including AWS Signature Version 4 or Cognito, allowing you to select the best authentication mechanism for your environment and access patterns.

Serverless offerings, like Amazon Rekognition, Amazon Bedrock, Lambda, and API Gateway are all deployed across multiple Availability Zones by default. They also do not involve any long-running compute resources that require maintenance, meaning there are fewer failure modes for you to worry about. Using an AWS Region-redundant, fully managed services without any single-points-of-failure provides you with a high degree of redundancy, without requiring any extra work to configure auto-scaling or recovery processes.

Amazon Bedrock is a fully managed service that offers your choice of foundation models. Amazon Rekognition is also a fully managed service that helps you add pre-trained computer vision APIs to your applications. These artificial intelligence and machine learning (AI/ML) workloads make it easy to get great performance with AI/ML models without investing heavily in specialized hardware. Especially for AI and ML workloads, using fully managed services provides excellent performance for inference without needing to test many hardware configurations and optimize models to take advantage of certain chip architectures.

When compared to compute infrastructure that must be provisioned in advance, serverless options like Amazon Bedrock, Amazon Rekognition, and Lambda can be invoked completely on-demand, without any dedicated hosts running when not needed. In addition, when the total cost of ownership is considered, managed services like Amazon Bedrock and Amazon Rekognition allow you to spend less development time on undifferentiated infrastructure work. This drives substantial savings in labor throughout the software development lifecycle. Also, using completely serverless options allows the workload to scale up and down completely dynamically, without any charges accruing during periods of disuse, while also being able to scale to handle spikes in traffic.

In the same way that serverless options help reduce cost by eliminating wasteful overprovisioning of compute resources, they reduce the power consumed and environmental impact of the workload as well. In addition, Amazon is committed to renewable energy, and using managed services running on AWS, like Amazon Bedrock, Amazon Rekognition, and Lambda, makes it easier for you to drive down your carbon footprints. Using fully managed, serverless services—particularly managed by a provider like AWS who is deeply invested in renewable energy—helps minimize wasted compute resources and thus unnecessary carbon emissions as well.