Jason Wadsworth Serverless SaaS AWS Communtity Day Midwest 2023

1. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m
Serverless SaaS
B u i l d i n g f o r M u l t i - Te n a n c y

2. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m
About Me
C H I E F A R C H I T E C T, T R U S T
Jason Wadsworth
jasonwadsworth@outlook.com
@quizout – Twitter
jasonwadsworth – LinkedIn
jason.wadsworth.dev - Blog

3. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m 3
 Understand what SaaS is and why you might want to use it
 Have an understanding of what the different AWS serverless
technologies are and how to use them
 Have questions about what things to lookout for when building a
SaaS application
 Want to be sure your SaaS application is built in a secure manor
About You
W H O I S T H I S F O R ?

4. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m 4
Deployment Models
AWS AppSync
AWS Lambda
Amazon DynamoDB
Pooled Isolated
AWS AppSync
AWS Lambda
Amazon DynamoDB
(all tenants) (tenant 1)
AWS AppSync
AWS Lambda
Amazon DynamoDB
(tenant 2-n)
Hybrid
AWS AppSync
AWS Lambda
Amazon DynamoDB
(pooled)
AWS AppSync
AWS Lambda
Amazon DynamoDB
(isolated 1)
AWS AppSync
AWS Lambda
Amazon DynamoDB
(isolated 2-n)

5. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m 5
SaaS challenges
Performance Isolation
Data Security & Privacy
Onboarding & Offboarding Compliance
Maintenance & Upgrades

6. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m
”If your idea of data protection is a
WHERE clause in SQL you aren’t
protecting my data”

7. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m 7
Build for Failures
FA I L S A F E
AWS AppSync
AWS Lambda
Amazon DynamoDB
Role
AWS Lambda
Custom Authorizer
AWS STS
Role
STS Assume Role with Dynamic
Policy
"Action": "dynamodb:*",
"Resource": "*",
"Condition": {
"ForAllValues:StringLike": {
"dynamodb:LeadingKeys": [
"<TENANT_ID>*"
]
}
}

8. © Armanino LLP. All Rights Reserved | Possible (Re)Defined
a r m a n i n o . c o m
Thank You!
Jason Wadsworth
jasonwadsworth@outlook.com
@quizout – Twitter
jasonwadsworth – LinkedIn
jason.wadsworth.dev - Blog