Getting Started with Ohlala SmartOps

• 1: Prerequisites
• 2: Enable Amazon Bedrock
• 3: AWS Marketplace Subscription
• 4: Azure Bot Registration
• 5: Deploy CloudFormation Stack
• 6: Connect to Microsoft Teams
• 7: Verification & Testing

1 - Prerequisites

Prerequisites

Before deploying Ohlala SmartOps, ensure you have all the necessary requirements in place.

✅ AWS Requirements

AWS Account

• Administrative access to create IAM roles, ECS clusters, and other resources
• AWS Marketplace subscription capability
• Billing enabled for AWS services usage

Required AWS Services

Ensure these services are available in your chosen region:

• ✅ Amazon ECS Fargate - Container orchestration
• ✅ Amazon Bedrock - AI model access
• ✅ API Gateway - Teams webhook endpoint
• ✅ CloudFormation - Infrastructure deployment
• ✅ Systems Manager (SSM) - Instance management

Existing Infrastructure

• At least 1 EC2 instance to manage
• SSM Agent installed on instances
  • Pre-installed on: Amazon Linux 2, Ubuntu 20.04+, Windows Server 2016+
  • Manual installation guide ↗️ for other OS

✅ Microsoft Teams Requirements

Azure Account

• Azure subscription (Free tier works)
• Ability to create resources in Azure Portal
• Azure AD tenant for authentication

Teams Workspace

• Microsoft Teams installed and configured
• Admin permissions to install custom apps
• Teams channel where you want to add the bot

✅ Knowledge Requirements

Recommended Skills

• Basic understanding of AWS services
• Familiarity with CloudFormation
• Experience with Microsoft Teams administration
• Understanding of bot concepts

Not Required

• Programming knowledge
• Deep AWS expertise
• Infrastructure as Code experience

📋 Pre-Deployment Checklist

Use this checklist to verify readiness:

• AWS account with admin access
• AWS region selected that supports all required services
• At least one EC2 instance running
• SSM Agent installed on instances
• Azure account created
• Microsoft Teams workspace available
• Teams admin permissions confirmed

🌍 Regional Availability

Recommended Regions

For optimal performance, we recommend:

• US East (N. Virginia) - us-east-1
• US West (Oregon) - us-west-2
• Europe (Ireland) - eu-west-1
• Europe (Frankfurt) - eu-central-1

All Supported Regions

The solution works in any region with ECS Fargate support. Bedrock access is automatically handled through cross-region inference profiles.

⏭️ Next Step

Once you’ve verified all prerequisites:

Continue to Bedrock Setup →

2 - Enable Amazon Bedrock

Enable Amazon Bedrock

🤖 Why Bedrock is Required

Ohlala SmartOps uses Amazon Bedrock with Claude Sonnet 4 to provide:

• Natural language understanding of your commands
• Intelligent analysis of infrastructure issues
• Smart recommendations for optimization
• Context-aware responses based on your environment

📋 Step-by-Step Setup

1. Open Amazon Bedrock Console

Navigate to the Amazon Bedrock console in your deployment region:

Open Amazon Bedrock Console ↗️

2. Navigate to Model Access

In the left sidebar, click on “Model access”

3. Enable Claude Sonnet 4

1. Click “Modify model access”
2. Find and enable:
   • ✅ Claude Sonnet 4 (anthropic.claude-sonnet-4-20250514-v1:0)
3. Click “Submit” to request access

4. Wait for Approval

• Standard models are usually approved immediately
• Wait for status to show “Access granted”
• Refresh the page if needed

🌍 Regional Considerations

How Regional Access Works

Ohlala SmartOps automatically handles regional model access:

1. Detects your deployment region
2. Uses the optimal inference profile for your location
3. No additional configuration needed
4. Same performance across all regions

Primary Regions (Native Support)

Best performance in these regions:

• US East (N. Virginia) - us-east-1
• US West (Oregon) - us-west-2
• Europe (Frankfurt) - eu-central-1
• Europe (Ireland) - eu-west-1
• Asia Pacific (Tokyo) - ap-northeast-1
• Asia Pacific (Sydney) - ap-southeast-2

All Other Regions

Supported via cross-region inference profiles:

• Europe (Paris) - eu-west-3
• Europe (London) - eu-west-2
• Asia Pacific (Singapore) - ap-southeast-1
• Asia Pacific (Mumbai) - ap-south-1
• Canada (Central) - ca-central-1
• South America (São Paulo) - sa-east-1
• And more…

🔍 Verify Access

Check Model Status

1. Return to the Model access page
2. Verify Claude Sonnet 4 shows “Access granted”
3. Note the model ID for reference: anthropic.claude-sonnet-4-20250514-v1:0

❗ Troubleshooting

Model Not Available

• Issue: Claude Sonnet 4 not listed
• Solution: Check you’re in a supported region

Access Denied After Deployment

• Issue: Bot shows “Model access required” error
• Solution:
  1. Enable model access as shown above
  2. Wait for “Access granted” status
  3. No need to redeploy - the bot will work automatically

Request Pending Too Long

• Issue: Status stuck on “Pending”
• Solution:
  1. Cancel and resubmit the request
  2. Contact AWS Support if issues persist

💡 Good to Know

Model Costs

• Input: $3.00 per million tokens
• Output: $15.00 per million tokens
• Average command uses ~500-2000 tokens
• Built-in cost tracking alerts you at $5 milestones

Alternative Models

Currently, only Claude Sonnet 4 is supported. Support for additional models may be added in future releases.

⏭️ Next Step

Once Bedrock access is enabled:

Continue to AWS Marketplace →

3 - AWS Marketplace Subscription

AWS Marketplace Subscription

Subscribe to Ohlala SmartOps through AWS Marketplace to get the official deployment package.

📦 What You’ll Get

The AWS Marketplace subscription provides:

• ✅ Official CloudFormation template
• ✅ Pre-built container images
• ✅ Automatic updates
• ✅ AWS support integration
• ✅ Simplified billing through AWS

📋 Subscription Steps

1. Navigate to AWS Marketplace

Open the Ohlala SmartOps product page:

AWS Marketplace - Ohlala SmartOps ↗️

2. View Purchase Options

Click “View purchase options” to start the subscription process.

3. Subscribe to the Product

Scroll down and click “Subscribe” to accept the terms.

4. Launch Your Software

Once subscribed, click “Launch your software” to proceed with deployment.

5. Download CloudFormation Template

1. Select “Amazon ECS” as the launch method
2. Click the “cloudformation template” link to download
3. Save the template file locally - you’ll need it in the next steps
4. Alternatively, you can download the cloudformation template here: Download Template

🔍 Verify Subscription

Check Subscription Status

1. Go to AWS Marketplace → Manage subscriptions
2. Find “Ohlala SmartOps” in your subscriptions
3. Verify status shows “Active”

Download Template Backup

❓ Common Questions

Q: Can I cancel anytime?

A: Yes, you can cancel the subscription anytime through AWS Marketplace. You only pay for resources used.

Q: Is there a free trial?

A: Yes, 30 days free trial is available. After that, standard pricing applies.

Q: Can I deploy multiple instances?

A: Yes, you can deploy multiple stacks using the same subscription. Contact us for volume licensing.

Q: How do updates work?

A: Updates are provided through new versions in Marketplace. You can update at your convenience.

⏭️ Next Step

With your subscription active and template downloaded:

Continue to Azure Bot Setup →

4 - Azure Bot Registration

Azure Bot Registration

Set up the Azure Bot that will connect Ohlala SmartOps to Microsoft Teams.

🎯 What You’ll Create

• Azure Bot resource for Teams integration
• Authentication credentials (App ID, Password, Tenant ID)
• Secure communication channel with Teams

📋 Step-by-Step Setup

1. Access Azure Portal

Navigate to Azure Portal and sign in:

https://portal.azure.com ↗️

2. Create Resource Group (Optional)

It’s recommended to create a dedicated resource group:

1. Search for “Resource groups” in the search bar
2. Click “Create”
3. Configure:
   • Subscription: Your Azure subscription
   • Resource group: ohlala-smartops-rg
   • Region: Choose any region (e.g., North Europe)
4. Click “Review + create” then “Create”

3. Create Azure Bot

Search for Azure Bot

In the Azure Portal search bar, type “Azure Bot” and select it from the marketplace.

Configure Bot Settings

Fill in the bot configuration:

Bot handle: OhlalaSmartOps
Subscription: Your Azure subscription
Resource group: ohlala-smartops-rg (or your chosen group)
Location: North Europe (or your preferred region)
Pricing tier: F0 (Free)
Type: Single Tenant (default)
Microsoft App ID: Create new

Click “Review + create” then “Create”. Deployment takes about 1-2 minutes.

4. Get Authentication Credentials

After deployment completes, go to your bot resource.

Navigate to Configuration

1. Go to Settings → Configuration
2. You’ll see the Microsoft App ID - copy and save this

Create App Password

1. Click “Manage Password” next to the App ID
2. In the new window, click “New client secret”

3. Configure the secret:
   • Description: Ohlala SmartOps Bot Secret
   • Expires: Choose duration (recommend 24 months)

4. Click “Add”
5. IMPORTANT: Copy the secret value immediately!

Get Tenant ID

The Tenant ID is shown in the Azure Portal:

1. Click on your account menu (top right)
2. Select “Switch directory”
3. Your Tenant ID is displayed there

Alternatively:

1. Go to Azure Active Directory
2. The Tenant ID is on the overview page

📝 Save Your Credentials

You now have three critical values needed for deployment:

5. Configure Teams Channel

1. Open Channels Page

In your Azure Bot resource, navigate to Channels in the left sidebar.

2. Add Microsoft Teams Channel

1. Click on the Microsoft Teams icon
2. Accept the terms and click “Agree”

3. Click on Apply

❓ Common Issues

Issue: Free Tier Not Available

Solution: F0 tier is limited to one per subscription. Use S1 (Standard) tier instead (~$0.50/month).

Issue: Can’t Create App Password

Solution: You need appropriate permissions in Azure AD. Contact your Azure administrator.

Issue: Lost App Password

Solution: You can create a new client secret:

1. Go to Bot Configuration → Manage Password
2. Create a new client secret
3. Update your deployment with the new password

⏭️ Next Step

With your Azure Bot configured and credentials saved:

Continue to CloudFormation Deployment →

5 - Deploy CloudFormation Stack

Deploy CloudFormation Stack

Deploy the complete Ohlala SmartOps infrastructure using the CloudFormation template from AWS Marketplace.

📦 What Gets Deployed

The CloudFormation stack creates:

• ECS Fargate cluster with container services
• API Gateway for Teams webhook
• Network infrastructure (VPC, subnets, security groups)
• IAM roles with appropriate permissions
• Secrets Manager for credentials
• CloudWatch logs for monitoring

📋 Deployment Steps

1. Open CloudFormation Console

Navigate to CloudFormation in your target region:

https://console.aws.amazon.com/cloudformation/home ↗️

2. Create New Stack

Click “Create stack” and choose “With new resources (standard)”

3. Upload Template

1. Select “Choose an existing template”
2. Select “Upload a template file”
3. Click “Choose file” and select the template downloaded from AWS Marketplace
4. Click “Next”

4. Configure Stack Parameters

Stack Name

Enter a unique stack name: OhlalaSmartOps (or your preference)

Required Parameters

Fill in the mandatory parameters:

VPC Configuration (if NewVPC)

Keep defaults or customize:

• VPCCIDR: 10.0.0.0/16
• PublicSubnet1CIDR: 10.0.1.0/24
• PublicSubnet2CIDR: 10.0.2.0/24
• PrivateSubnet1CIDR: 10.0.10.0/24
• PrivateSubnet2CIDR: 10.0.11.0/24
• EnableNATGateway: true

Click “Next”

5. Configure Stack Options

On the stack options page:

• Tags: (Optional) Add tags for resource organization
• Permissions: Leave default
• Advanced options: Leave default

Click “Next”

6. Review and Create

1. Review all settings
2. Check the acknowledgment box:
   • ✅ I acknowledge that AWS CloudFormation might create IAM resources with custom names

3. Click “Submit”

7. Monitor Deployment

The stack creation takes 5-10 minutes. Monitor progress:

1. Select your stack in the CloudFormation console
2. Check the Events tab for real-time updates
3. Wait for status: CREATE_COMPLETE

📊 Get Stack Outputs

Once deployment completes, get the important URLs:

1. Select your stack
2. Go to the Outputs tab
3. Save these values:

🔍 Verify Deployment

Check ECS Service

1. Go to ECS Console → Clusters
2. Find your cluster (e.g., OhlalaSmartOps-Cluster-...)
3. Check service shows 1 running task

Check API Gateway

1. Go to API Gateway Console
2. Find your API (e.g., OhlalaSmartOps-API-...)
3. Verify endpoints are created

Check Health Endpoint

Test the health endpoint (no authentication required):

curl https://your-api-id.execute-api.region.amazonaws.com/prod-stackname/health

Should return: {"status": "healthy"}

❓ Troubleshooting

Stack Creation Failed

IAM Role Already Exists

Error: “Resource of type ‘AWS::IAM::Role’ with identifier already exists” Solution: Use a different stack name, or delete the existing role first

Insufficient Permissions

Error: “User is not authorized to perform: iam:CreateRole” Solution: Ensure you have admin permissions or required IAM policies

Service Quota Exceeded

Error: “Service quota exceeded” Solution: Request quota increase or deploy in different region

Stack Stuck in CREATE_IN_PROGRESS

• Check Events tab for specific resource causing delay
• ECS service can take 3-5 minutes to stabilize
• If stuck >15 minutes, consider deleting and retrying

⏭️ Next Step

With infrastructure deployed and webhook URL ready:

Continue to Teams Integration →

6 - Connect to Microsoft Teams

Connect to Microsoft Teams

Link your deployed infrastructure with Microsoft Teams to enable chat-based infrastructure management.

🔗 What You’ll Configure

• Azure Bot webhook endpoint
• Teams channel connection
• Bot app installation
• Initial testing

📋 Integration Steps

1. Configure Webhook in Azure Bot

Get the Webhook URL

From your CloudFormation stack outputs, copy the TeamsWebhookURL:

https://xxx.execute-api.region.amazonaws.com/prod-stackname/api/messages

Update Bot Configuration

1. Go to Azure Portal ↗️
2. Navigate to your Azure Bot resource
3. Go to Configuration under Settings
4. Set Messaging endpoint to your webhook URL
5. Click Apply to save

2. Install Teams App

1. Download the Teams app package:

   Ohlala SmartOps Teams App ↗️

2. Customize the manifest:

   • Extract the zip file
   • Edit manifest.json
   • Replace YOUR_APP_ID with your Microsoft App ID
   • Re-zip the files

3. Install in Teams:

   • Open Microsoft Teams
   • Go to Apps → Manage your apps
   • Click Upload an app
   • Select Upload a custom app
   • Choose your zip file
   • Click Add to install

N.B.: You can also ask your Teams admin to upload the app for you if you lack permissions on Teams Admin portal ↗️

4. Add Bot to Team or Chat

For Personal Use

1. Find Ohlala SmartOps in your apps
2. Click Add
3. Start chatting directly with the bot

For Team Use

1. Go to your team
2. Click ⋮ (More options) → Manage team
3. Go to Apps tab
4. Click Upload a custom app
5. Select your app
6. Click Add to team

🧪 Test the Connection

Send Test Message

In Teams, message the bot:

@Ohlala SmartOps hello

Expected response:

👋 Hello! I'm Ohlala SmartOps, your AI-powered AWS infrastructure assistant.
Type '/help' to see what I can do for you.

Test Basic Command

Try a simple command:

@Ohlala SmartOps /help

The bot should respond with a help card showing available commands.

🔍 Verify Integration

Check Connection Status

In Azure Portal

1. Go to your bot → Channels
2. Microsoft Teams should show Running
3. Click Microsoft Teams to see activity

In AWS Console

1. Go to CloudWatch → Log Groups
2. Find /aws/ecs/ohlala-smartops-...
3. Check for incoming request logs

Monitor API Gateway

1. Go to API Gateway Console
2. Select your API
3. Go to Dashboard
4. You should see incoming requests when messaging the bot

❓ Troubleshooting

Bot Not Responding

Check Webhook URL

• Verify URL in Azure Bot Configuration matches CloudFormation output exactly
• Ensure it includes the full path with /api/messages

Check ECS Service

• Go to ECS Console
• Verify service has 1 running task
• Check task logs for errors

Test Health Endpoint

curl https://your-api.execute-api.region.amazonaws.com/prod-stackname/health

“Service Unavailable” Error

Causes:

• ECS task not running
• API Gateway misconfigured
• Authentication failing

Solution:

1. Check ECS service is running
2. Verify API Gateway deployment
3. Check CloudWatch logs for details

Authentication Errors

Symptoms: 401 or 403 errors in logs

Solution:

1. Verify Microsoft App credentials in Secrets Manager
2. Ensure Tenant ID is correct
3. Check Lambda authorizer logs

Teams App Installation Issues

“App not found”:

• Ensure manifest.json has correct App ID
• Verify bot is published in Azure

“Permissions required”:

• Contact Teams admin to allow custom apps
• Check organizational app policies

🎉 Success Checklist

Confirm everything is working:

• Azure Bot shows Teams channel as Running
• Webhook URL configured correctly
• Teams app installed successfully
• Bot responds to messages
• Help command works
• No errors in CloudWatch logs

⏭️ Next Step

Your bot is connected! Now let’s verify everything and run your first commands:

Continue to Verification & Testing →

7 - Verification & Testing

Verification & Testing

Congratulations on deploying Ohlala SmartOps! Let’s verify everything is working and explore the capabilities.

✅ Deployment Checklist

Before testing commands, verify each component:

AWS Infrastructure

• CloudFormation stack shows CREATE_COMPLETE
• ECS service has 1 running task
• API Gateway endpoint responds to health check
• CloudWatch logs are being created
• Secrets Manager contains credentials

Azure & Teams

• Azure Bot shows Teams channel as Running
• Webhook URL is configured correctly
• Teams app is installed
• Bot appears in Teams chat/channel

Bedrock

• Claude Sonnet 4 shows Access granted
• Model is available in deployment region

🎯 Your First Commands

1. Test Connection

@Ohlala SmartOps hello

Expected Response: Friendly greeting confirming the bot is working

2. Get Help

@Ohlala SmartOps help

Expected Response: Interactive card with available commands and examples

3. Check Instance Status

@Ohlala SmartOps show me my EC2 instances

Expected Response: List of your EC2 instances with status information

4. Health Report

@Ohlala SmartOps /health

Expected Response: Detailed health metrics for your instances

5. Natural Language Query

@Ohlala SmartOps which instances are running in us-east-1?

Expected Response: Filtered list based on your query

🔍 Advanced Testing

Test SSM Integration

@Ohlala SmartOps check disk space on i-1234567890abcdef0

• Verifies SSM command execution
• Returns disk usage information

Test Cost Analysis

@Ohlala SmartOps analyze my EC2 costs

• Checks CloudWatch metrics access
• Provides cost optimization suggestions

Test Multi-Instance Commands

@Ohlala SmartOps show me all stopped instances

• Tests filtering and analysis capabilities
• Demonstrates natural language understanding

📊 Monitoring Your Deployment

CloudWatch Metrics

Monitor key metrics in CloudWatch:

1. ECS Service

   • CPU utilization (should be <50%)
   • Memory utilization (should be <70%)
   • Task count (should be 1)

2. API Gateway

   • Request count
   • 4XX/5XX errors (should be minimal)
   • Latency (should be <3 seconds)

3. Bedrock Usage

   • Token consumption
   • API throttling events
   • Model invocation errors

🚨 Common Issues & Solutions

Issue: Bot Not Responding

Quick Diagnosis:

# Check health endpoint
curl https://your-api.execute-api.region.amazonaws.com/prod-stackname/health

Solutions:

1. Check ECS task is running
2. Verify webhook URL in Azure
3. Ensure Teams app is installed
4. Review CloudWatch logs

Issue: “Model Access Required” Error

Symptom: Bot responds but shows Bedrock error

Solution:

1. Go to Bedrock Console → Model access
2. Enable Claude Sonnet 4
3. Wait for “Access granted”
4. Retry command (no restart needed)

Issue: No Instances Found

Symptom: Bot works but doesn’t see EC2 instances

Checks:

1. Instances are in same region as deployment
2. Instances have SSM agent installed
3. IAM permissions are correct
4. Try: @Ohlala SmartOps list all instances in all regions

Issue: Commands Timeout

Symptom: Bot shows “thinking” but never responds

Solutions:

1. Check ECS task memory/CPU
2. Look for Bedrock throttling
3. Verify network connectivity
4. Scale ECS service if needed

Issue: Authentication Failures

Symptom: 401/403 errors in logs

Solutions:

1. Regenerate Azure Bot credentials
2. Update Secrets Manager
3. Restart ECS service
4. Check tenant ID is correct

Best Practices

1. Start simple: Use basic commands first
2. Be specific: Include instance IDs for targeted actions
3. Use natural language: The bot understands context
4. Review suggestions: Always verify before applying changes

🎉 Success Indicators

Your deployment is successful when:

• ✅ Bot responds within 2-3 seconds
• ✅ All test commands work
• ✅ No errors in CloudWatch logs
• ✅ Costs align with expectations
• ✅ Team members can use the bot

📚 Next Steps

Now that your bot is working:

1. Explore Features

   • Try advanced commands
   • Experiment with natural language queries
   • Review health and cost reports

2. Train Your Team

   • Share the bot with team members
   • Create usage guidelines
   • Document common workflows

🆘 Getting Help

If you encounter issues:

1. Check Documentation

   • Troubleshooting Guide

2. Contact Support

   • Email: support@ohlala.cloud
   • Include: Stack name, region, error messages

3. Community Resources

   • Email: support@ohlala.cloud
   • AWS Forums
   • Teams Community

🎊 Congratulations!

You’ve successfully deployed Ohlala SmartOps! Your AI-powered infrastructure assistant is ready to help manage your AWS environment through natural language conversations in Microsoft Teams.

Happy automating! 🤖