An open-source gateway that routes every coding agent through one governed endpoint on Amazon Bedrock, in your own AWS account. SSO, quotas, policy routing, and cost attribution that reaches the work.
Built and sponsored by DNX Solutions, an AWS Premier Consulting Partner.
Engineers use personal keys across a dozen tools. Finance sees one number with no breakdown. Nobody can answer "what are we getting for this?" No SSO. No quotas. No policy control.
LLM proxies count tokens.
They meter traffic but never tie a dollar to a person, a repo, or a result.
Analytics tools watch outcomes.
They see what ships but sit outside the request path. No quotas, no routing, no cutoffs.
Aperture does both.
Control and attribution in one gateway. Open source, in your account. No data platform required.
Every agent routes through one gateway in your AWS account. No data leaves your infrastructure.
Engineers sign in with existing identity. No personal or shared API keys anywhere.
Soft and hard spend limits, rate limits, and automatic cutoffs.
Route by task, cost ceiling, or org policy. Allowlist models per team, with fallbacks.
Link sessions to PRs and issues. Measure against merge rates and cycle time.
Machine callers get their own keys, quotas, and tenant tags, so per-customer AI cost is a line item.
Ships with dashboards and logs who used which model, when, and for what.
One CDK stack. No data platform, no vendor tenancy, no egress out of your account.
Read the routing logic that spends your budget. Fork it if your policy needs something else.
Every request is stamped with user, repo, branch, and ticket. Spend breaks down by pull request and ticket, so you see cost per shipped feature, not cost per token.
If your product is multi-tenant and uses AI, give each application, batch job, and tenant its own service account: its own key, its own quota, its own tags. Aperture attributes spend to the customer that caused it, so you can charge it back, price a plan, and find the tenant that costs more than it pays.
Two headers on your own outbound call. No SDK, no sidecar.
Traffic from every agent flows through one gateway you own, then to Amazon Bedrock. Aperture never sees your data, because it runs inside your boundary.
Complete for a single team on a single AWS account. No feature gates, no sign-up walls.
Everything in Community, plus multi-account governance implemented per customer by DNX.