CloudWatch Alarm Routing to On-Call
CloudWatch alarms hit an SNS topic subscribed to LunoGen. The agent checks the current on-call rotation, adds runbook links, and DMs the right engineer on WhatsApp — not just the #alerts channel.
Conversation example
CloudWatch alarm firing on RDS prod. Looking up the current on-call rotation and recent deploys...
CloudWatch Alarm — rds-prod-high-cpu Resource: lunogen-prod-db (db.m6g.2xlarge) Metric: CPUUtilization = 94% (threshold 85% for 3 datapoints) Region: us-east-1 Severity: P2 (degraded, not down) Duration: 14 minutes Context: - No deploy in the last 6 hours - Connection count normal - Slow query log: 'SELECT * FROM events WHERE ...' (no index) On-call: @sam (primary) — DM'd on WhatsApp with runbook link: https://docs.lunogen.com/runbook/rds-cpu Backup: @daniel-p (notified in #oncall-backup) I'll escalate if unacked in 5 min.
More AWS use cases
EC2 Instance State Change Alerts
Any EC2 instance that starts, stops, or terminates unexpectedly fires an EventBridge event. The agent reads it, adds context (who, why, tags), and posts to your #infra WhatsApp group.
Daily AWS Cost Tracker and Forecast
Every morning, the agent hits Cost Explorer for yesterday's spend by service, compares to the budget, forecasts end-of-month, and drops it on WhatsApp before the coffee is cold.
Lambda Function Error Notifications
CloudWatch Alarms on Lambda error metrics route through the agent. It groups related errors, pulls the latest stack trace from CloudWatch Logs, and pings on-call with the suspected cause.
S3 Bucket Public-Access Audit
The agent checks every S3 bucket policy and ACL daily. If a bucket becomes public — or if an existing policy changes — it fires an immediate WhatsApp alert with the diff.
IAM Policy and Suspicious API Call Alerts
CloudTrail streams IAM changes and sensitive API calls (root login, access key creation, policy attach) to the agent, which flags anything suspicious and pings the security channel on WhatsApp.
Deploy this in minutes
Create a LunoGen agent, connect AWS, and start running this workflow from WhatsApp today.