Setup Guide

Connect your AWS account to ConvOps in about 5 minutes from app.convops.io. No code changes, no agents, no email required.

Sign upapp.convops.io

Enter detailsAccount ID + channel

Deploy stackPre-filled, one click

VerifyPaste SNS ARN

✓

LiveFirst alert on WhatsApp

Create your account — takes 30 seconds.

Go to app.convops.io/sign-up. Enter your email and create a password. No credit card, no approval needed.

Create free account →

Connect your AWS account — enter details

Dashboard → "Connect AWS Account" → fill in Step 1 of 3.

The portal's first screen collects everything ConvOps needs. No YAML editing, no CLI yet.

AWS Account ID — the 12-digit number from the top-right of your AWS console.

Alert channel — WhatsApp, Slack, or both. Enter your WhatsApp number if choosing WhatsApp. Slack connects after with one OAuth click.

Advanced options (optional) — enable remediation actions (restart/scale/reboot). Skip and add later.

Deploy the CloudFormation stack — one click

The portal generates a pre-filled URL. Click "Open AWS CloudFormation" and confirm.

Clicking “Open AWS CloudFormation” opens the AWS console with the stack pre-configured — your account ID, region, and CustomerExternalId are all filled in automatically. In the console you just:

1Review the parameters (pre-filled — nothing to change)
2Check “I acknowledge that AWS CloudFormation might create IAM resources with custom names”
3Click Create Stack — takes ~60 seconds
4Come back to the portal and click “Stack is deployed → Continue”

What the stack creates in your account:

› IAM Role (ConvOpsAccessRole) — read-only by default, protected by your unique ExternalId via STS.
› SNS Topic (ConvOpsAlerts) — receives CloudWatch alarm events and forwards to ConvOps.
› EventBridge Rule (ConvOpsAlarmStateChanges) — automatically routes every alarm state change in your account. No per-alarm wiring needed.

Verify the connection — paste your SNS Topic ARN

Back in the portal, Step 3 of 3. The only thing you copy-paste.

Where to find the SNS Topic ARN:

1Go to AWS Console → CloudFormation
2Click the stack convops-setup
3Click the Outputs tab
4Copy the value next to SNSTopicArn

When you click Verify & connect, the portal calls the ConvOps API which confirms the SNS subscription and registers your workspace automatically. No email, no waiting, no manual step from ConvOps.

✓

You're live — activate your channels

The portal shows next steps after successful verification.

Activate WhatsApp

Send Hi to +4915511520510 on WhatsApp. This activates your number so alerts can be delivered. One-time setup.

Connect Slack (if you chose Slack)

The portal shows an “Add to Slack” button after verification. One OAuth click — ConvOps will DM you alerts and accept replies in Slack.

Add to Slack →

That's it. The next time any CloudWatch alarm in your account fires, ConvOps will receive it via EventBridge, run AI root cause analysis, and send you a message. Reply 4 to deep-dive or 1 + YES to take action.

What the CloudFormation stack creates in your AWS account

Resource	Type	What it does
ConvOpsAccessRole	IAM Role	Lets ConvOps read your metrics + take approved actions. Protected by your unique ExternalId via STS.
ConvOpsAlertTopic	SNS Topic	Receives CloudWatch alarm events and forwards them to ConvOps via HTTPS subscription.
ConvOpsAlertTopicPolicy	SNS Policy	Authorises CloudWatch and EventBridge to publish to the topic.
ConvOpsAlarmStateChanges	EventBridge Rule	Automatic. Catches every ALARM + OK state change across your whole account. No per-alarm setup needed.

What ConvOps can and cannot do

ConvOps CAN

✓Read CloudWatch metrics, alarms, logs (all resources)
✓Restart / scale / rollback ECS services (if actions enabled)
✓Reboot / stop-start EC2 (if actions enabled)
✓Reboot / failover RDS / Aurora (if actions enabled)
✓Throttle / rollback Lambda, scale EKS, redrive SQS DLQ (if actions enabled)

ConvOps CANNOT

✗Terminate or delete any resource
✗Modify security groups, VPCs, or IAM policies
✗Access S3 or Secrets Manager
✗Take any action without your explicit WhatsApp / Slack confirmation
✗Act on anything if actions are not enabled

Troubleshooting

Verification failed in the portal?

The most common cause is pasting the wrong ARN. Make sure you're copying SNSTopicArn from the Outputs tab (not RoleArn). It should look like: arn:aws:sns:REGION:ACCOUNT_ID:ConvOpsAlerts

Not receiving alerts after setup?

›Did you send “Hi” to +4915511520510 on WhatsApp? That activates your number for delivery.
›Confirm EventBridge rule ConvOpsAlarmStateChanges is ENABLED in EventBridge → Rules
›Check SNS → Subscriptions — the HTTPS subscription should show Confirmed
›Test by temporarily lowering a CloudWatch alarm threshold to trigger it

CloudFormation deploy failed?

Your IAM user/role needs: cloudformation:*iam:CreateRoleiam:PutRolePolicyiam:AttachRolePolicysns:CreateTopicevents:PutRuleevents:PutTargets The checkbox for IAM resources must be ticked.

Action failed with permission denied?

Check that you enabled actions during setup (Advanced options → Allow ConvOps to take actions). If not, delete and redeploy the stack with that option checked, or update the stack's EnableActions parameter to true.

Still stuck?

Email us — we'll walk you through it. Usually responds within a few hours.

nitesh@convops.io

Create your free account →