What the subscription audit bot costs
This is the cheapest system in the series, and the reason is structural: the model is only ever asked about a merchant string it has not seen before. After the first pass resolves a business’s forty-odd merchants, the ongoing cost is a handful of new ones a month. Here is where each cent goes.
Key takeaways
- About $2 a month at 120 new merchants. Roughly $3 at 400 new merchants.
- One Bedrock read per merchant is the only line that scales. Everything else is rounding.
- Nothing is always-on, so a quiet month genuinely costs almost nothing.
- The model only runs on merchant strings never seen before, so the second month costs a fraction of the first.
- The duplicate test runs before the read, so resends are free.
- The three real risks: a retry loop, storage nobody expires, and a bigger model than the job needs.
The bill at three volumes
These are US East prices at the time of writing, at three volumes that bracket most small businesses. Find the bar closest to your own and read across.
Line by line
| Line | At 120 new merchants | How it scales |
|---|---|---|
| Bedrock read | $0.25 | Linear. One call per merchant, roughly 1,800 in and 200 out tokens. |
| SES | $0.07 | Linear. About 1.2 messages per merchant. |
| DynamoDB + S3 | $0.30 | Storage grows with what you retain, not with throughput. |
| Lambda + SQS | $0.12 | Linear, and effectively free at this scale. |
| CloudWatch | $0.16 | Flat, if you set retention. Unbounded if you do not. |
| Secrets Manager | $0.40 | Flat. One secret, $0.40 a month. |
| AWS Budgets | $0.46 | Flat. Two actions, so you find out before the bill does. |
The volume unit here is deliberately unusual: it is new merchant strings, not transactions. Transactions are free to process; only an unrecognised merchant costs a model call, and a settled business produces very few of those.
The three ways this bill surprises you
Every one of these has happened to somebody, and all three are cheap to prevent.
- Re-resolving known merchants. If the known-merchants cache is keyed on the raw descriptor rather than the cleaned one, every trivial variation of the same string is a fresh model call. Key it on the cleaned merchant and the first pass is the only expensive one.
- Re-ingesting overlapping exports. Without the line fingerprint, re-uploading a statement doubles charges, which breaks grouping and can produce a flurry of false new-subscription alerts.
- Log retention left at never. With a few hundred transactions a month the logs will out-cost everything else within a year. Thirty days of retention is the whole fix.
What it costs when nothing happens
This matters more than the headline number for a seasonal business. In a month with nothing to process the bill is the fixed band: Secrets Manager at forty cents, AWS Budgets at forty-six, and a few cents of storage. Call it a dollar. There is no instance to stop and nothing to remember to turn off.
- Management
- Analytics
- Front-end & mobile
Set these on day one
- A dead-letter queue on every SQS queue, with a maximum receive count of three.
- Thirty-day retention on every CloudWatch log group. There is no default that is safe.
- An S3 lifecycle rule on the object prefix, tiering at 90 days and expiring at your actual record-keeping horizon.
- Two AWS Budgets actions — one that emails at half your expected spend, one at double it. The second is how you find out about a loop in an hour instead of a month.
- Provisioned concurrency: none. Nothing here is latency-sensitive enough to justify paying for a warm function.
Next: the same system drawn for engineers — service names, resource identifiers, IAM scopes, table schemas and the model id.
All posts