AWS

Connect AWS to the Pagerly SRE Agent to query EC2, ECS, Lambda, and other services.

What the Agent Can Do

• List and describe ECS services, tasks, and task definitions

• List EC2 instances and their status

• List Lambda functions and their configurations

• Query CloudWatch metrics for AWS resources

• Search CloudWatch Logs across log groups

Setup Instructions

1. Go to AWS Console → IAM → Roles → Create role

2. Select AWS account → Another AWS account

3. Account ID: 065318983578 (Pagerly's account)

4. Check Require external ID → enter: pagerly-{teamId} (use the External ID shown in the form)

5. Click Next → attach this inline policy with permissions for ECS, Lambda, CloudWatch, etc.

6. Name the role (e.g., PagerlySREReadRole)

7. Copy the Role ARN from the role summary page

Required Credentials

Field	Description	Example
Role ARN	IAM role ARN for Pagerly	arn:aws:iam::123456789012:role/PagerlySREReadRole
AWS Region (optional)	Default region for API calls	us-east-1

Cross-account access via IAM Role is the most secure approach — Pagerly never stores your AWS credentials directly.

Context Prompt Tips

"Our ECS cluster is prod-api in us-west-2. EC2 instances are tagged with env=production. Lambda functions start with api-."

Docs

• AWS IAM Roles for Cross-Account Access