SigNoz One-Click AWS Integration automates the collection of metrics and logs from your AWS infrastructure. Using CloudFormation and an intelligent AutoDiscovery agent, it provisions the necessary AWS resources (IAM roles, Firehose streams, CloudWatch subscriptions) to stream telemetry data directly to SigNoz.
This integration eliminates manual configuration for individual services and automatically detects new resources as they are provisioned.
Supported Integrations
The following AWS services are supported for one-click monitoring:
Key Capabilities
- AutoDiscovery: Automatically detects new AWS services and instances in real-time.
- Automated Setup: Deploys all necessary resources (Log Groups, Metric Streams, Firehose) via CloudFormation.
- Multi-Region & Multi-Account: Monitor resources across multiple regions and accounts from a single SigNoz instance.
- Pre-built Dashboards: Access out-of-the-box dashboards for key services immediately after connection.
Installation
Prerequisites
- AWS Account Access: You need permissions to create CloudFormation stacks and IAM roles in your AWS account.
- SigNoz Cloud Account: This feature is available for SigNoz Cloud users.
Step 1: Connect AWS Account
- In SigNoz, navigate to Integrations > Amazon Web Services.

- Select the services you want to monitor (e.g., EC2, RDS, Lambda).
- Select the Region where you want to deploy the integration agent.
- Choose Regions to Monitor: Select all AWS regions you wish to collect data from.
- Click Launch CloudFormation Stack. This will redirect you to the AWS Console with a pre-filled template.

- In AWS, acknowledge the required capabilities and create the stack. The stack will provision:
- IAM Roles for permissions
- Kinesis Firehose streams for data delivery
- CloudWatch Metric Streams
- Subscription filters for logs
Step 2: Verify Connection
Once the CloudFormation stack is deployed:
- Return to the SigNoz Integrations page.
- The status will update to Connected once data ingestion begins.
- Dashboards for the selected services will be automatically enabled.

Managing Integrations
Adding Regions or Services
To expand monitoring to new regions or services:
- Go to the Integrations page and open the AWS configuration.
- Select the additional regions or services you wish to monitor.
- The agent will automatically update the configuration to include these new resources.
You turn on log and metric collection per service, and the setting applies to every region that you enable for the AWS account. You cannot enable one service in one region and a different service in another region. S3 Sync is the exception: you select each bucket together with its region.

Stopping Collection for a Service
In SigNoz, go to Integrations > Amazon Web Services, open the service, and turn off Log Collection, Metric Collection, or both. The change applies to all enabled regions, and the agent removes the collection resources for that service.
Do not delete a regional telemetry CloudFormation stack by hand to stop collection. The agent recreates the resources to match the configuration in SigNoz.
Adding Multiple Accounts
You can connect multiple AWS accounts to a single SigNoz workspace:
- In the AWS Integrations page, click Add Account.
- Follow the same CloudFormation deployment steps for the new account.
- Data from all accounts will be aggregated in your dashboards, taggable by
account_id.
Each integration covers one AWS account, so you manage one integration for each account. If you connect a parent account, SigNoz does not set up its child accounts. If you provision through infrastructure as code, use the SigNoz cloud integration APIs to configure the integration for each account.
Updating the Agent
The agent does not update automatically. To move it to a newer version:
- In the AWS Console, open the base
signoz-integrationCloudFormation stack. - Update the
SigNozIntegrationAgentVersionparameter to the version you want. - Create and execute a change set. CloudFormation updates the agent's ECS service and Lambda function as required.
Uninstallation
To remove the integration:
- Disable the AWS integration in SigNoz.
- The agent will clean up the created resources (subscription filters, streams).
- Manually delete the CloudFormation stack in your AWS Console to remove the agent and IAM roles.
Architecture
The integration deploys one AWS Integration Agent per AWS account, in the region you choose. The agent reads its configuration from SigNoz and manages the regional collection pipelines. It:
- Scans for selected services across enabled regions.
- Configures CloudWatch Metric Streams to push metrics to SigNoz.
- Sets up CloudWatch Log Subscription Filters to forward logs via Kinesis Firehose.
When you enable more regions, the agent adds collection pipelines in those regions. It does not add more agents.

The agent connects to SigNoz with a service account that SigNoz creates for the integration. This account has the read-only signoz-viewer role. Do not add elevated roles to it. For MCP or other API access, create a separate service account.