diff --git a/introduction-to-bedrock/batch_api/batch-inference-cloudtrail-analyzer.ipynb b/introduction-to-bedrock/batch_api/batch-inference-cloudtrail-analyzer.ipynb
index 3cf074b9..9b9c36dc 100644
--- a/introduction-to-bedrock/batch_api/batch-inference-cloudtrail-analyzer.ipynb
+++ b/introduction-to-bedrock/batch_api/batch-inference-cloudtrail-analyzer.ipynb
@@ -658,6 +658,14 @@
     "Overall, the CloudTrail event summaries do not indicate any clearly malicious or suspicious activities, aside from the unusual pattern of model invocations by the \"--redacted--\" user and the broad permissions granted to the SageMaker execution role. It is recommended to closely monitor the user's activities, review their permissions, investigate the source IP address, and ensure the principle of least privilege is followed for all IAM roles."
    ]
   },
+  {
+   "cell_type": "markdown",
+   "metadata": {},
+   "source": [
+    "### Note\n",
+    "The model chosen for this tutorial is Haiku. If you find that the job has expired after 24 hours, this is because of high demand for batch inference jobs for this model. You can try increasing the `timeoutDurationInHours` to be greater than the default 24 hours, or you can try a different model."
+   ]
+  },
   {
    "cell_type": "markdown",
    "metadata": {},