Introducing OpenClaw on Amazon Lightsail to run your autonomous private AI agents | Amazon Web Services
Amazon Lightsail now offers a preconfigured OpenClaw instance for running a private, autonomous AI assistant without managing a complex installation. The setup uses Amazon Bedrock by default and supports browser access plus messaging integrations such as WhatsApp, Discord, and Telegram. AWS aims to simplify deployment while addressing the security concerns of running an agent that can access email, files, and the web. ## Launching OpenClaw on Lightsail - In the Lightsail console, create a new instance. - Select: - A preferred AWS Region and Availability Zone - Linux/Unix as the platform - OpenClaw as the blueprint - A 4 GB memory plan is recommended for performance. - The instance typically reaches a running state within minutes. ## Pairing the Browser - Use **Connect using SSH** from the Lightsail Getting Started tab. - Copy the dashboard URL and security credentials shown in the SSH welcome message. - Open the dashboard and enter the access token in the **Gateway Token** field. - Approve the pairing from the terminal by entering `y`, then `a`. - Once pairing succeeds, the dashboard displays an **OK** status. ## Enabling Amazon Bedrock - OpenClaw is preconfigured to use Amazon Bedrock as its AI provider. - Copy the setup script from the Getting Started tab. - Run it in AWS CloudShell to enable Bedrock API access. - After completion, use the **Chat** section of the dashboard to interact with the assistant. ## Messaging Integrations OpenClaw can connect to services such as Telegram and WhatsApp, allowing users to interact with the assistant from a phone or messaging client. It can perform tasks including email management, web browsing, and file organization. ## Permissions and Costs - The setup script creates an IAM role with permissions to access Bedrock. - IAM policies can be customized, but removing required permissions may stop the assistant from generating responses. - Lightsail charges are based on the selected instance plan’s on-demand hourly rate. - Bedrock usage is billed according to tokens processed. - Third-party models offered through AWS Marketplace may add software charges. ## Security Considerations - Do not expose the OpenClaw gateway directly to the public internet. - Treat the gateway authentication token like a password. - Rotate the token regularly. - Store credentials in environment files rather than hardcoding them in configuration. - Review OpenClaw’s gateway security guidance before granting the agent access to sensitive systems. OpenClaw on Lightsail is available in all commercial AWS Regions where Lightsail operates. It provides a convenient deployment path, but users should carefully control IAM permissions, monitor costs, and secure the gateway before connecting personal data or messaging accounts.
Read original(opens in new tab)