EC2 + OpenClaw + Bedrock な環境で Kiro CLI をエージェントとして動かしてみた

AWSTemplateFormatVersion: '2010-09-09'
Description: OpenClaw + Kiro CLI on EC2 (simple, no Docker)

Parameters:
  ProjectName:
    Type: String
    Default: openclaw-simple
  InstanceType:
    Type: String
    Default: t4g.medium
    AllowedValues: [t4g.small, t4g.medium, t4g.large]
  KeyPairName:
    Type: AWS::EC2::KeyPair::KeyName
  AllowedSSHCidr:
    Type: String
    Default: 172.0.0.1/32
    Description: CIDR for SSH access
  ImageId:
    Type: AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>
    Default: /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64
  OpenClawModel:
    Type: String
    Default: global.anthropic.claude-sonnet-4-6
    AllowedValues:
      - global.anthropic.claude-sonnet-4-6
      - global.anthropic.claude-haiku-4-5-20251001-v1:0
      - apac.anthropic.claude-3-haiku-20240307-v1:0
      - apac.amazon.nova-pro-v1:0
  GatewayToken:
    Type: String
    NoEcho: true
    MinLength: 16

Resources:
  EC2Role:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub '${ProjectName}-ec2-role'
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: ec2.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
      Policies:
        - PolicyName: bedrock-invoke
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                  - bedrock:InvokeModel
                  - bedrock:InvokeModelWithResponseStream
                  - bedrock:ListFoundationModels
                  - bedrock:ListInferenceProfiles
                Resource: '*'
        - PolicyName: AssumeKiroReadOnly
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action: sts:AssumeRole
                Resource: !GetAtt KiroReadOnlyRole.Arn

  KiroReadOnlyRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub '${ProjectName}-kiro-readonly'
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              AWS: !Sub 'arn:aws:iam::${AWS::AccountId}:root'
            Action: sts:AssumeRole
            Condition:
              ArnEquals:
                aws:PrincipalArn: !Sub 'arn:aws:iam::${AWS::AccountId}:role/${ProjectName}-ec2-role'
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/ReadOnlyAccess

  InstanceProfile:
    Type: AWS::IAM::InstanceProfile
    Properties:
      InstanceProfileName: !Sub '${ProjectName}-instance-profile'
      Roles:
        - !Ref EC2Role

  SecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupName: !Sub '${ProjectName}-sg'
      GroupDescription: SSH from allowed IP only
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: !Ref AllowedSSHCidr
      Tags:
        - Key: Name
          Value: !Sub '${ProjectName}-sg'

  LaunchTemplate:
    Type: AWS::EC2::LaunchTemplate
    Properties:
      LaunchTemplateName: !Sub '${ProjectName}-lt'
      LaunchTemplateData:
        InstanceType: !Ref InstanceType
        KeyName: !Ref KeyPairName
        IamInstanceProfile:
          Arn: !GetAtt InstanceProfile.Arn
        BlockDeviceMappings:
          - DeviceName: /dev/xvda
            Ebs:
              VolumeSize: 20
              VolumeType: gp3
              Encrypted: true
        MetadataOptions:
          HttpTokens: required
          HttpEndpoint: enabled
        TagSpecifications:
          - ResourceType: instance
            Tags:
              - Key: Name
                Value: !Sub '${ProjectName}'

  EC2Instance:
    Type: AWS::EC2::Instance
    Properties:
      LaunchTemplate:
        LaunchTemplateId: !Ref LaunchTemplate
        Version: !GetAtt LaunchTemplate.LatestVersionNumber
      ImageId: !Ref ImageId
      SecurityGroupIds:
        - !Ref SecurityGroup
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash
          set -euo pipefail
          exec > >(tee /var/log/openclaw-setup.log) 2>&1
          echo "=== Setup started ==="

          # Node.js 22 LTS + OpenClaw
          dnf install -y nodejs22 unzip git
          npm install -g openclaw@latest

          # Kiro CLI
          curl --proto '=https' --tlsv1.2 -sSf \
            "https://desktop-release.q.us-east-1.amazonaws.com/latest/kirocli-aarch64-linux.zip" \
            -o /tmp/kirocli.zip
          cd /tmp && unzip -o kirocli.zip
          sudo -u ec2-user /tmp/kirocli/install.sh --no-confirm
          rm -rf /tmp/kirocli /tmp/kirocli.zip
          ln -sf /home/ec2-user/.local/bin/kiro-cli /usr/local/bin/kiro-cli
          ln -sf /home/ec2-user/.local/bin/kiro-cli-chat /usr/local/bin/kiro-cli-chat
          ln -sf /home/ec2-user/.local/bin/kiro-cli-term /usr/local/bin/kiro-cli-term

          # AWS profile for Kiro readonly
          mkdir -p /home/ec2-user/.aws
          cat > /home/ec2-user/.aws/config << AWSEOF
          [profile kiro-readonly]
          role_arn = ${KiroReadOnlyRole.Arn}
          credential_source = Ec2InstanceMetadata
          role_session_name = kiro-readonly-session
          region = ${AWS::Region}
          AWSEOF
          chown -R ec2-user:ec2-user /home/ec2-user/.aws

          # OpenClaw config (non-interactive)
          export HOME=/home/ec2-user
          export OPENCLAW_STATE_DIR=/home/ec2-user/.openclaw
          mkdir -p /home/ec2-user/.openclaw/workspace /home/ec2-user/.openclaw/agents/main/sessions
          cat > /home/ec2-user/.openclaw/openclaw.json << 'OCCONF'
          {
            "gateway": { "mode": "local" },
            "agents": {
              "defaults": {
                "model": {}
              }
            }
          }
          OCCONF
          chown -R ec2-user:ec2-user /home/ec2-user/.openclaw
          sudo -u ec2-user bash -c "export HOME=/home/ec2-user; openclaw config set agents.defaults.model.primary 'amazon-bedrock/${OpenClawModel}'"
          sudo -u ec2-user bash -c "export HOME=/home/ec2-user; openclaw config set gateway.remote.token '${GatewayToken}'"

          # Kiro agent skill for OpenClaw
          mkdir -p /home/ec2-user/.openclaw/skills/kiro-agent
          cat > /home/ec2-user/.openclaw/skills/kiro-agent/SKILL.md << 'SKILLEOF'
          ---
          name: kiro-agent
          description: "Delegate tasks to Kiro CLI (AWS Builder ID auth, flat-rate). Use for coding tasks, file operations, and AWS read-only queries via kiro-readonly profile."
          metadata:
            {
              "openclaw": { "emoji": "🤖", "requires": { "anyBins": ["kiro-cli"] } }
            }
          ---

          # Kiro CLI Agent

          Delegate tasks to Kiro CLI on the host. Kiro uses AWS Builder ID authentication (flat-rate).

          ## Read-Only AWS Operations

          ```bash
          bash pty:true command:"AWS_PROFILE=kiro-readonly kiro-cli chat --no-interactive --trust-all-tools 'your AWS query here'"
          ```

          ## Coding Tasks

          ```bash
          bash pty:true workdir:~/project command:"kiro-cli chat --no-interactive --trust-all-tools 'your coding task here'"
          ```

          ## Rules
          1. Always use pty:true
          2. For AWS operations, always prefix with AWS_PROFILE=kiro-readonly
          3. Prefer Kiro for heavy/iterative tasks (flat-rate vs per-token)
          SKILLEOF
          chown -R ec2-user:ec2-user /home/ec2-user/.openclaw/skills

          # systemd service
          cat > /etc/systemd/system/openclaw.service << 'SVCEOF'
          [Unit]
          Description=OpenClaw Gateway
          After=network.target

          [Service]
          Type=simple
          User=ec2-user
          Environment=HOME=/home/ec2-user
          Environment=OPENCLAW_STATE_DIR=/home/ec2-user/.openclaw
          Environment=OPENCLAW_WORKSPACE_DIR=/home/ec2-user/.openclaw/workspace
          Environment=PATH=/usr/local/bin:/usr/bin:/bin
          Environment=AWS_REGION=${AWS::Region}
          Environment=AWS_PROFILE=default
          ExecStart=/usr/bin/openclaw gateway --allow-unconfigured --bind loopback --port 18789 --token ${GatewayToken}
          Restart=always
          RestartSec=5

          [Install]
          WantedBy=multi-user.target
          SVCEOF
          systemctl daemon-reload
          systemctl enable --now openclaw

          echo "=== Setup complete ==="

Outputs:
  InstanceId:
    Value: !Ref EC2Instance
  SSMConnect:
    Value: !Sub 'aws ssm start-session --target ${EC2Instance} --region ${AWS::Region}'
  KiroLoginCommand:
    Value: 'sudo -u ec2-user /home/ec2-user/.local/bin/kiro-cli login'