Deployment Guide

Prerequisites

1. Install AWS CLI

macOS:

curl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "AWSCLIV2.pkg"
sudo installer -pkg AWSCLIV2.pkg -target /

Linux:

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

2. Install SSM Session Manager Plugin

macOS (ARM):

curl "https://s3.amazonaws.com/session-manager-downloads/plugin/latest/mac_arm64/session-manager-plugin.pkg" -o "session-manager-plugin.pkg"
sudo installer -pkg session-manager-plugin.pkg -target /

Linux:

curl "https://s3.amazonaws.com/session-manager-downloads/plugin/latest/ubuntu_64bit/session-manager-plugin.deb" -o "session-manager-plugin.deb"
sudo dpkg -i session-manager-plugin.deb

3. Configure AWS CLI

aws configure
# Enter your AWS Access Key ID
# Enter your AWS Secret Access Key
# Enter default region (e.g., us-west-2)
# Enter default output format (json)

4. Create EC2 Key Pair

aws ec2 create-key-pair \
  --key-name OpenClaw-key \
  --query 'KeyMaterial' \
  --output text > OpenClaw-key.pem

chmod 400 OpenClaw-key.pem

Deployment

One-Click Deployment (Recommended)

Visit GitHub repository and click "Launch Stack" button for your region:

https://github.com/aws-samples/sample-OpenClaw-on-AWS-with-Bedrock

Manual Deployment via CLI

aws cloudformation create-stack \
  --stack-name OpenClaw-bedrock \
  --template-body file://openclaw-bedrock.yaml \
  --parameters \
    ParameterKey=KeyPairName,ParameterValue=OpenClaw-key \
    ParameterKey=openclawModel,ParameterValue=global.amazon.nova-2-lite-v1:0 \
    ParameterKey=InstanceType,ParameterValue=t4g.medium \
    ParameterKey=CreateVPCEndpoints,ParameterValue=true \
  --capabilities CAPABILITY_IAM \
  --region us-west-2

# Wait for completion (~8 minutes)
aws cloudformation wait stack-create-complete \
  --stack-name OpenClaw-bedrock \
  --region us-west-2

Default Configuration:

Model: Nova 2 Lite (90% cheaper than Claude, excellent for everyday tasks)
Instance: t4g.medium (Graviton ARM, 20% cheaper than t3.medium)
VPC Endpoints: Enabled (private network, more secure)

Accessing OpenClaw

Step 1: Get Instance ID

INSTANCE_ID=$(aws cloudformation describe-stacks \
  --stack-name OpenClaw-bedrock \
  --query 'Stacks[0].Outputs[?OutputKey==`InstanceId`].OutputValue' \
  --output text \
  --region us-west-2)

echo $INSTANCE_ID

Step 2: Start Port Forwarding

aws ssm start-session \
  --target $INSTANCE_ID \
  --region us-west-2 \
  --document-name AWS-StartPortForwardingSession \
  --parameters '{"portNumber":["18789"],"localPortNumber":["18789"]}'

Keep this terminal open!

Step 3: Get Gateway Token

Open a new terminal:

# Connect to instance
aws ssm start-session --target $INSTANCE_ID --region us-west-2

# Switch to ubuntu user
sudo su - ubuntu

# Get token from SSM Parameter Store
aws ssm get-parameter --name /openclaw/openclaw-bedrock/gateway-token --with-decryption --query Parameter.Value --output text --region us-west-2

Step 4: Open Web UI

Open in browser:

http://localhost:18789/?token=<your-token>

Connecting Messaging Platforms

For detailed guides, visit OpenClaw Documentation.

In Web UI: Channels → Add Channel → WhatsApp
Scan QR code with WhatsApp
Send test message

Create bot with @BotFather: /newbot
Get bot token
In Web UI: Configure Telegram channel with token
Send /start to your bot

Discord

Create bot at Discord Developer Portal
Get bot token and enable Message Content intent
In Web UI: Configure Discord channel
Invite bot to your server

Slack

Create app at Slack API
Configure bot token scopes (chat:write, channels:history)
In Web UI: Configure Slack channel
Invite bot to channels

Microsoft Teams

Microsoft Teams integration requires Azure Bot setup.

📖 Full guide: https://docs.molt.bot/channels/msteams

Verification

Check Setup Status

# Connect via SSM
aws ssm start-session --target $INSTANCE_ID --region us-west-2

# Check status
sudo su - ubuntu
cat ~/.openclaw/setup_status.txt

# View setup logs
tail -100 /var/log/openclaw-setup.log

# Check service
XDG_RUNTIME_DIR=/run/user/1000 systemctl --user status openclaw-gateway

Test Bedrock Connection

# On the instance
REGION=$(curl -s http://169.254.169.254/latest/meta-data/placement/region)

aws bedrock-runtime invoke-model \
  --model-id global.amazon.nova-2-lite-v1:0 \
  --body '{"messages":[{"role":"user","content":[{"text":"Hello"}]}],"inferenceConfig":{"maxTokens":100}}' \
  --region $REGION \
  output.json

cat output.json

Configuration

Change Model

# Connect to instance
sudo su - ubuntu

# Edit config
nano ~/.openclaw/openclaw.json

# Change "id" under models.providers.amazon-bedrock.models[0]
# Available models:
# - global.amazon.nova-2-lite-v1:0 (default, cheapest)
# - global.anthropic.claude-sonnet-4-5-20250929-v1:0 (most capable)
# - us.amazon.nova-pro-v1:0 (balanced)
# - us.deepseek.r1-v1:0 (open-source reasoning)

# Also update agents.defaults.model.primary
# Example: "amazon-bedrock/global.anthropic.claude-sonnet-4-5-20250929-v1:0"

# Restart
XDG_RUNTIME_DIR=/run/user/1000 systemctl --user restart openclaw-gateway

Change Instance Type

Update CloudFormation stack with new InstanceType parameter:

aws cloudformation update-stack \
  --stack-name OpenClaw-bedrock \
  --use-previous-template \
  --parameters \
    ParameterKey=InstanceType,ParameterValue=c7g.xlarge \
    ParameterKey=KeyPairName,UsePreviousValue=true \
    ParameterKey=openclawModel,UsePreviousValue=true \
  --capabilities CAPABILITY_IAM \
  --region us-west-2

Instance Options:

Graviton (ARM): t4g.small/medium/large/xlarge, c7g.large/xlarge (recommended)
x86: t3.small/medium/large, c5.xlarge (alternative)

Updating

Update OpenClaw

# Connect via SSM
sudo su - ubuntu

# Update to latest version
npm update -g openclaw

# Restart service
XDG_RUNTIME_DIR=/run/user/1000 systemctl --user restart openclaw-gateway

# Verify version
openclaw --version

Update CloudFormation Template

aws cloudformation update-stack \
  --stack-name OpenClaw-bedrock \
  --template-body file://openclaw-bedrock.yaml \
  --parameters \
    ParameterKey=KeyPairName,UsePreviousValue=true \
    ParameterKey=openclawModel,UsePreviousValue=true \
    ParameterKey=InstanceType,UsePreviousValue=true \
  --capabilities CAPABILITY_IAM \
  --region us-west-2

Cleanup

# Delete stack (removes all resources)
aws cloudformation delete-stack \
  --stack-name OpenClaw-bedrock \
  --region us-west-2

# Wait for deletion
aws cloudformation wait stack-delete-complete \
  --stack-name OpenClaw-bedrock \
  --region us-west-2

Cost Optimization

Use Cheaper Models

Nova 2 Lite (default): $0.30/$2.50 per 1M tokens - 90% cheaper than Claude
Nova Pro: $0.80/$3.20 per 1M tokens - 73% cheaper than Claude
DeepSeek R1: $0.55/$2.19 per 1M tokens - open-source alternative

Use Graviton Instances (Recommended)

t4g.medium: $24/month (vs t3.medium $30/month) - 20% savings
c7g.xlarge: $108/month (vs c5.xlarge $122/month) - 11% savings
Better price-performance across all workloads

Disable VPC Endpoints

Set CreateVPCEndpoints=false to save $22/month (less secure, traffic goes through internet)

Use Smaller Instance

t4g.small: $12/month (sufficient for personal use)

Use Savings Plans

Purchase 1-year or 3-year Savings Plans for 30-40% discount on EC2 costs.

Next Steps

Configure messaging channels: https://docs.molt.bot/channels/
Install skills: openclaw skills list
Set up automation: openclaw cron add "0 9 * * *" "Daily summary"
Explore advanced features: https://docs.molt.bot/

For troubleshooting, see TROUBLESHOOTING.md.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deployment Guide

Prerequisites

1. Install AWS CLI

2. Install SSM Session Manager Plugin

3. Configure AWS CLI

4. Create EC2 Key Pair

Deployment

One-Click Deployment (Recommended)

Manual Deployment via CLI

Accessing OpenClaw

Step 1: Get Instance ID

Step 2: Start Port Forwarding

Step 3: Get Gateway Token

Step 4: Open Web UI

Connecting Messaging Platforms

WhatsApp

Telegram

Discord

Slack

Microsoft Teams

Verification

Check Setup Status

Test Bedrock Connection

Configuration

Change Model

Change Instance Type

Updating

Update OpenClaw

Update CloudFormation Template

Cleanup

Cost Optimization

Use Cheaper Models

Use Graviton Instances (Recommended)

Disable VPC Endpoints

Use Smaller Instance

Use Savings Plans

Next Steps

FilesExpand file tree

DEPLOYMENT.md

Latest commit

History

DEPLOYMENT.md

File metadata and controls

Deployment Guide

Prerequisites

1. Install AWS CLI

2. Install SSM Session Manager Plugin

3. Configure AWS CLI

4. Create EC2 Key Pair

Deployment

One-Click Deployment (Recommended)

Manual Deployment via CLI

Accessing OpenClaw

Step 1: Get Instance ID

Step 2: Start Port Forwarding

Step 3: Get Gateway Token

Step 4: Open Web UI

Connecting Messaging Platforms

WhatsApp

Telegram

Discord

Slack

Microsoft Teams

Verification

Check Setup Status

Test Bedrock Connection

Configuration

Change Model

Change Instance Type

Updating

Update OpenClaw

Update CloudFormation Template

Cleanup

Cost Optimization

Use Cheaper Models

Use Graviton Instances (Recommended)

Disable VPC Endpoints

Use Smaller Instance

Use Savings Plans

Next Steps