Bedrock doesn't host a separate copy of a model — it exposes third-party foundation models (Claude, Grok, Llama, Mistral, and others) through a standard InvokeModel/Converse API, authenticated with AWS IAM instead of a provider-specific key. AWS passes through each provider's own token pricing, and adds AWS-side features on top: VPC-isolated traffic via PrivateLink, data residency tied to the chosen AWS region, and compliance coverage (SOC 2, ISO 27001, HIPAA-eligible, FedRAMP Moderate) inherited from the Bedrock platform itself. It's an access and governance layer for enterprises already running AWS, not a cheaper or different version of the underlying model.