# On-call for AWS

> Your alarms already exist. Pagerless decides which ones should wake someone, explains them, and can roll back ECS or Lambda through a least-privilege role.

URL: https://pagerless.dev/solutions/aws
Updated: 2026-10-22

## Three ways in

| Source | How |
| --- | --- |
| CloudWatch alarms | [SNS subscription](https://pagerless.dev/integrations/aws-cloudwatch); ALARM opens, OK closes |
| Your services | Node, Go or Python SDK in the container or function |
| Terraform | [`npx pagerless connect`](https://pagerless.dev/integrations/terraform-aws) writes `pagerless.tf` |

## Fixes

Through an IAM role you create from a CloudFormation link, with an external ID: ECS back to the previous task definition, force a new deployment or change desired count; Lambda alias back to the previous version or change reserved concurrency; Amplify re-runs the last good build.