AWS Marketplace is a procurement and subscription service for software, data, and some third-party cloud offerings sold through AWS. In security terms, it matters because access to Marketplace can authorize purchases, subscriptions, or activation steps that have real billing impact and can expose additional services.
In Amazon Bedrock environments, some third-party model access paths may use Marketplace subscription mechanics before a model can be invoked. That means a stolen AWS identity with the right permissions may be able to create subscriptions or enable billable AI usage without needing to hack the model itself. Defenders should treat Marketplace activity as both an entitlement event and a financial signal: review who can subscribe, watch for unexpected purchase or activation requests, and alert on unusual pairing of identity changes with model-access or billing events.