Elastic Compute Service
Elastic Compute Service
Elastic Compute Service
Document
Elastic Compute Service
What's New
Announcement
OpenAPI related
Pricing and quotas are related
About products and plugins
Feature discontinuation
Overview
Billing
Billable items
Billing methods
Billing methods change
Getting Started
User Guide
Instances
Instance types
X86 Computing
Elastic Bare Metal Server
Heterogeneous Computing
Select instance billing method
Spot instance
Elastic Scheduled Instance
Offsetting Resources
Reserved Instances
Buying ECS instances
Logging in to an instance
Logging in to a Linux instance
Managing instance status
Modifying instance types
Using instance user data and metadata
Instance metadata
Images
Public images
veLinux images
Custom images
Importing custom images
Creating custom images
Image detection
End of life (EOL) of image
Elastic Block Storage
Basic volume operations
Partitioning and formatting a volume
Extending a volume
EBS Agent
Snapshots
Basic snapshot operations
Auto snapshot policies
DataInsights
Network
Network interface and IP address
IP Address
IPv4 address
Security group
Security
Passwords and key pairs
Deployment and scaling
Monitoring
Monitoring metrics
Event monitoring
Local volume event O&M
Method 1: Solve the local volume failure by replacing the faulty volume
O&M
Cloud assistant
Managing agents
Process choreography
Common operation and maintenance tasks
Batch operations on instances
Batch operations on EBS Volumes
Batch operations on images
Temporary upgrade of bandwidth
Managing application updates
orchestration plan
Patch management
Managing patch plans
Managing patch baselines
IAM
Tags and projects
Best Practices
AI applications
OpenClaw (formerly Moltbot)
Quickly deploying OpenClaw via application templates
Quickly deploying OpenClaw via marketplace images
Manually deploying OpenClaw
Self-service website creation
Building environments
Building a Web environment (Windows)
Building applications
Building FTP site
Deploying databases
Building game servers
Building websites
Building a WordPress blog
Building multiple websites
Manage software sources for Linux instances
AIGC practices
Performance test
Network performance test
Instance configuration
Setting up AD Domain Services on Windows OS
Windows Multi - User Login
Changing screen resolution
Instance data
Uploading or downloading files
Data restoration
ECS instance local time synchronization
Volume
Monitoring
Security
Images
Kernel fine-tuning
O&M
Troubleshooting
Remote log in issue
Linux operating system issue
Windows operating system issue
SSH log in issue
Operating system issue
veLinux operating system issue
Linux operating system issue
Windows operating system issue
Instance status issue
Instance unable to start issue
High instance load issue
GPU instances issue
Network connection issue
Network configuration issue
Storage classes issue
EBS Volume issue
Local Disk issue
Logs and monitoring issue
Third - party software issue
API Reference
Regions and availability zones
Instances
Images
HPC clusters
Key pairs
Tags
Volumes
Reserved storage capacity
Snapshot
Auto snapshot policy
Monitoring
Deployment sets
Launch templates
Cloud assistant
Patch management
SDK reference
CLI Reference
FAQ
Dedicated Host DDH
What's New
Billing
User Guide
Manage Dedicated Host
Manage Dedicated Host Cluster
Manage ECS instances
Monitoring and O&M
API reference
proprietary host
- Documentation
Elastic Compute ServiceElastic Compute ServiceUser GuideO&MProcess choreographyCommon operation and maintenance tasksManaging application updatesCreating OpenClaw (Linux) task to deploy AI Assistant Security service
Copy page
Download PDFManaging application updates
Creating OpenClaw (Linux) task to deploy AI Assistant Security service
Copy pageDownload PDFCreating OpenClaw (Linux) task to deploy AI Assistant Security service
You can use the application update feature of Orchestration to batch enable the AI Assistant Security service for existing OpenClaw ECS instances, enhancing their security and controllability.
You can also log in to an instance and enable the AI Assistant Security feature by executing relevant commands to obtain the corresponding security protection capabilities. Learn more.
tip
Currently, only the following regions are supported: China (Beijing), China (Shanghai), China (Guangzhou). Learn more.
Background
As a powerful AI agent, OpenClaw has the permission to directly operate devices, read local files, call system commands, access the network, and more. If OpenClaw is improperly configured or maliciously exploited, it can easily lead to security risks such as data leakage, system damage, and financial loss. To address such risks, Volcano Engine provides AI Assistant Security, which offers all-round security protection for OpenClaw and ensures its safe, stable, and reliable operation in your environment.
AI Assistant Security acts as a dedicated security guardian for your AI assistant. Without affecting the normal operation of OpenClaw, it uses a built-in large model application firewall to monitor and defend against three core types of risks in real time:
- Prompt injection
- Attackers may hide malicious instructions in web pages, documents, or emails processed by OpenClaw, tricking it into performing unintended operations, such as stealing passwords or leaking data.
- PII leakage
- You may accidentally enter personal or corporate sensitive information (such as ID numbers, phone numbers, and API Keys) during AI conversations or document processing. This information may be sent to external large models, resulting in privacy breaches.
- Risky operations
- When interpreting ambiguous instructions, the AI agent may misinterpret instructions or be maliciously induced to call high-privilege tools and execute dangerous commands. For example, misinterpreting "clean up the desktop" as deleting critical system files.
Prerequisites
Usage notes
- The security protection deployment does not affect the normal running of instances, requires no instance restart, and will not interrupt services.
- For an ECS instance with AI Assistant Security enabled, redeployment only performs an overwrite installation and updates the service to the latest version.
Procedure
- Log in to the ECS console.
- In the left-side navigation pane, click "Maintenance & Monitoring > Orchestration".
- In the top menu bar, select the region and project of your business.
- On the "CloudOps Orchestration" page, click the "Common O&M tasks" tab and select "App update".
- Click the "Create task" button and configure the parameters described in the following table.
- ParameterDescriptionParameterDescriptionApplication configurationApplication templateThe OpenClaw application you deployed. The default name is "OpenClaw", which cannot be modified currently.Task templateThe preset standardized O&M process template. Select "Enabling AI Assistant Security", read and fully understand the "AI Assistant Security SDK Protocol", and then select "Agree AI Assistant Security SDK Protocol".Select instancesSelect instancesSelect the instances for which you want to deploy security protection.tipBy default, OpenClaw ECS instances are filtered by "Application template: OpenClaw". We recommend that you retain this filter to quickly locate target instances.Relevant informationAssociated projectYou can add the application update task to the project and manage it in a centralized manner by project dimension, which helps maintain resource independence and ensure data security. Learn more.tip
- After you select a project, new instances that meet the conditions automatically match the application update task.
- The project displayed here is the one you selected in Step 3. You can change the project in the top menu bar.
TagOptional. Used to select the scope of instances the application update task applies to based on tags. Click the "Add tag" button, and then select or enter the tag key and its corresponding tag value.tip- Up to 20 tags can be added.
- A tag is a key-value pair used to identify cloud resources. Tags help you categorize resources based on different dimensions, such as purpose, owner, or environment. This allows you to search and aggregate your resources. Learn more.
- Click the "Confirm" button to complete the operation.
- After you confirm that the information to be updated is correct, click the "Confirm" button to start deploying security protection.
Expected results
- Security protection deployed
- The deployment takes about 3 minutes. When the task status shows Succeeded, the deployment is complete.
- Security protection deployment failed
- A failed deployment does not affect the normal operation of the original services on the instance. It only means security protection is not enabled this time. You can try deployment again or submit a ticket for technical support.
Related operation
You can also enable security protection when purchasing an ECS instance to obtain enterprise-level security protection for OpenClaw. For details, see
Last updated: 2026.06.02 15:52:32
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
