AWS IoT Device Management makes it easy to securely onboard, organize, monitor, and remotely manage IoT devices at scale. In this hands-on, CLI-oriented workshop, learn about AWS IoT Device Management features such as onboarding options, over-the-air (OTA) updates, fleet indexing, thing groups, and fine-grained logging. Gain an understanding of how to automate management of IoT devices.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
IoT at Scale: Monitor and Manage Devices
with AWS IoT Device Management
Philipp Sacha
Specialist Solutions Architect IoT
Amazon Web Services
I O T 3 0 8

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
Amazon Web Services (AWS) IoT Device Management—
why it is important
Workshop setup
Hands-on exercises

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Workshop setup
Prerequisites
AWS account with admin privileges
Laptop, browser
Environment will be setup automatically with AWS CloudFormation
Amazon Elastic Compute Cloud instance with Open Source AWS Cloud9 IDE
Mainly command line oriented
AWS IoT Device Management helps you to automate fleet management

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud9 IDE

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Workshop and beyond
• By finishing the workshop you should have used and learned the
features of AWS IoT Device Management and know how to automate
maintain your device fleet
• You could use the workshop as base for your fleet management
• Automate it! Script it!
• Integrate provisioning in your own solution
• Maintain your fleet with Over-the-Air (OTA)

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
MQTT
AWS IoT 1-click
Endpoints Gateway/PLC
Cloud Enterprise
Applications
Device
Shadow
Rules
Engine
AWS IoT
Core
Certificate
Authority
Device
Shadow
AWS
Greengrass
AWS Lambda
Functions
Message
Router
Local Comms Long-range Comms
Amazon
FreeRTOS
Certificate
Authority
Local
Resource
s
OPC-UA
Adapter
IoT SDK
AWS IoT Device
Management
AWS IoT
Analytics
AWS
Enterprise
Users
Corp Apps
Amazon
QuickSight
Amazon
EMR
Amazon
Redshift
Amazon
S3
Machine
Learning
OPC-UA
MQTT
MQTT
IoT Users
Edge
Users
IoT Partners
Cert
AWS
Lambda
WiFi
All
AWS
OTA Updates
Analytics
Data Store
AWS Data
Pipelines
Templated
Reports
Local
Resources
IoT with AWS
AWS Batch
Fleet
Provisioning
Real-time
Fleet Index &
Search
AWS IoT
Device Defender
Ad-hoc & In-
depth Analysis
Risk Mitigation
Edge
ARM, Broadcom, Digi,
Expressif, Intel,
MediaTek, Microchip,
NXP, ST, TI,
Qualcomm, …
Gateway
Adlink Technology,
Advantech,
MachineShop,
Technicolor, …
Detection
Profiles
Alerts
Scheduled or
Ad-hoc Audit
MQTT
Platform
Ayala, Bright Wolf,
BSquare, C3IoT,
Mnubo, PTC ThingLogix,
Splunk, …
Connectivity
Amdocs, Asavie, AT&T,
Eseye, Soracom, TATA
Communications
Verizon, …
Consulting / ISVs
Accenture, Aricent,
ClearScale, CTP, Luxoft,
Mobiquity, solstice,
Storm Reply, Sturdy
Networks, TCS, TrekIO, …
Things
OTA
OTA
Amazon
FreeRTOS
Message
Broker
Integrated
Client
Amazon
Kinesis

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Batch
fleet
provisioning
Real-time
fleet index &
search
Fine
grained
device
logging &
monitoring
OTA updates
Features
AWS IoT Device Management
Onboarding Organize Monitor Update

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
When a device is provisioned
• (Created in the device registry)
• Device certificate registered with AWS IoT
Core
• (Certificate attached to the device)
• AWS IoT policy attached to the device
through:
• Certificate
• Thing group

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• Amazon API calls
• Single device provisioning
• Bulk device provisioning
• Just-in-time provisioning
• Just-in-time registration
AWS IoT
topic rule AWS
Lambda
function
AWS IoT provisioning options

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Grouping and searching for devices
Organize
into logical
hierarchies
Search both
the registry
and device
shadow
Notification
of device
changes

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thing group policies

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thing group benefits

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Search both device registry and device shadow
Lucene-index queries

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Registry events
• AWS IoT publishes event messages when certain events occur
• Event messages are published over AWS MQTT with a JavaScript
Object Notation (JSON) payload
• Registry events for things, thing types, thing groups
Use cases
• Trigger rules based on changes in the device registry
• Update own datastore when devices are CRUD
• Enrich data in the device registry

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Resource-specific logging
{
"timestamp": "2018-04-17 13:50:21.616",
"logLevel": "INFO",
"traceId": "6753a942-92c3-f979-587c-
9c634874b672",
"accountId": “123456789012",
"status": "Success",
"eventType": "Publish-In",
"protocol": "MQTT",
"topicName": "$aws/things/job-
agent/jobs/get", "clientId": "job-agent",
"principalId":
"9187849467e75a1a92cbcf0f3a6a49b4f10d820b9
9dfa62657cf4b6e60c0dac4",
"sourceIp": "35.178.51.181",
"sourcePort": 46435
}

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
IoT thing camera IoT thing windfarm IoT thing coffee pot IoT thing travel
Job
AWS IoT
Jobs use JSON files called Job
Documents to define actions
that the device should take
locally
Example use cases:
• Firmware updates
• Reboot a device
• Rotate certificates
Define local actions using jobs

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
{
"operation" : "reboot”
}
{
"operations" : {
"reboot" : ”safe-mode",
"configurations" : {
"log" : "persist",
"download" : {
"target" : "${aws:iot:s3-presigned-
url:https://s3.amazonaws.com/bucket/key}",
"patch" : "critical"
},
"restart" : "blemodule"
}
}
}
Structure of job documents

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
http://bit.ly/aws-iot-device-management-workshop

24. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.