Edge computing is all about moving compute power to the source of the data instead of having to bring it to the cloud. The edge is a fundamental part of IoT, and it is not only about connecting things to the internet. In this sesssion, we discuss how AWS Greengrass, which is an IoT edge software, can power devices small and large, from a sensor all the way to a wind turbine. With AWS Greengrass, these IoT devices can securely gather data, keep device data in sync, and communicate with each other while still using the cloud for management, analytics, and durable storage. Join us to learn more about the edge of IoT.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Computing at the Edge with
AWS IoT Greengrass
Scott Allison
Senior Product Manager
Amazon Web Services
I o T 2 0 6
Tatiana Cooke
Senior Product Manager
Amazon Web Services

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Edge: Why do we need it?
1. Physics
• Latency sensitive use cases: Self-driving cars, distracted driver, manufacturing line, more
• Does not get better with time
2. Economics
• Prohibitive costs of moving mostly throw-away data
• Number of connected devices is growing
• Volume of data generated per device is growing faster than any reductions transfer costs
3. Regulatory
• Restrictions on moving data depending on use case/regulatory authorities
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Common edge scenario
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Edge: Is this new?
“A decentralized system is closer to people whom it serves, and responsive to needs …” – P.
Berman, Decentralized Again, Datamation, 1970
“Whether to centralize decisions, locations, and functions is long-standing debate driven by
organizations” - J.L. King, Centralized versus Decentralized Computing, 1983
Mainframe
Client
Corporate data
center
AWS Cloud
Bicycle
Camera Car
Travel
Factory Windfarm
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Core architecture
Endpoints
Things
Sense & act
Cloud
Storage & compute
Secure device
connectivity
and messaging
Intelligence
Insights & logic → Action
Gateway
Gateway
Fleet
onboarding,
management, &
SW updates
Fleet
audit and
protection
Connecting
devices to
services
IoT data analytics,
actions, &
intelligence

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud to edge
Endpoints
Gateway
Gateway
Secure device
connectivity
and messaging
Edge Cloud

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data and
state sync
Security Over-the-air
updates
Connectors
Local
device shadows
Local
actions
Lambda
functions
AWS-grade
security
Easily update
Greengrass core
Machine
learning
inference
Local execution
of ML models
Local
resource
access
Lambdas interact with
peripherals
Easy integrations
with AWS services,
protocol adaptors,
and other SaaS
providers
ʥ
A
Local
messages and
triggers
Local
message broker
Secure
credential
store
AWS Secrets
Manager
functionality at
edge
Extend AWS Cloud to the edge
AWS IoT Greengrass
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass: Why did we build it?
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• With AWS IoT Greengrass, you can write
event-driven AWS Lambda functions in
the cloud and deploy them locally
• AWS IoT Greengrass runs Lambda
functions written in Python 2.7, Node.js
or Java
• Invoke Lambda functions with messaging
and shadow updates
• Offline actions and triggers, for example,
detecting low moisture in the soil and
then triggering controls to spray more
water inside a smart greenhouse
Local actions
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Local resource access
• Allows Lambdas to access local
resources on a device
• GPIO can be accessed to process
sensor and actuator data
• Lambdas can take advantage
of the local file system on your
operating system
• Lambdas can use GPUs for hardware
acceleration for machine learning
GPU
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass release v1.7
• Simplified deployments
• AWS IoT Greengrass Connectors
• Enhanced security
• AWS IoT Greengrass Secrets Manager
• AWS IoT Greengrass Hardware Security Integration
• Greater flexibility
• AWS IoT Greengrass per-Lambda Isolation & Permission
Configurations
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass release v1.7
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility
• Bulk Deployments
• ALPN/Proxy Support
• ML Inference
• More performant
• Smaller footprint

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Connectors
Amazon Kinesis
Data Firehose
Amazon Simple
Notification
Service
AWS IoT
Device Defender
Amazon
CloudWatch
Modbus RTU
Protocol
Adapter
Raspberry Pi
GPIO
Serial Stream
• More to come in 2019
• What are connectors?
• Connectivity to AWS services, industrial protocols,
local- and cloud-based applications
• Code-free configuration and installation
• 11 connectors available today
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility
ML Inference

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Connectors
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility
• How does it work?
• Customers select and configure connectors
via console or API/CLI
• Attach to a AWS IoT Greengrass group and
deploy

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Connectors
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility
• Amazon SNS
• Create an SNS topic via the SNS console/API
• Add SNS connector to Greengrass group via
Greengrass console/API
• Configure connector with ARN of SNS topic
• Deploy
• Publish messages to connector MQTT topic

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Connectors
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility
• Twilio
• Add your Twilio auth token to AWS Secrets
Manager; select from connector config
• Specify phone number and account SID
• Deploy
• Publish messages to connector MQTT topic

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Secrets Manager
• What is it?
• Extends AWS Secrets Manager to the
Greengrass cores for secure
management of keys, passwords,
credentials, endpoints, and
configurations
• Usable by connectors or AWS Lambda
functions
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Secrets Manager
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility
• How does it work?
• Customers provision secrets in AWS
Secrets Manager
• Attach a secret to a AWS IoT Greengrass
group and deploy
• Encrypted in transit and at rest

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Computing at the Edge with
AWS IoT Greengrass
Tatiana Cooke
Senior Product Manager
Amazon Web Services

24. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass Hardware Security Integration
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility
Private key stored
in file system
Device
Cloud
TLS Encryption of
messages
IAM role for
Greengrass Core
PKCS#11APIInterface

25. Use Case: Risks in Building Automation
Disrupt service by sending
high volume of traffic
Denial of Service
Mimic the identity of a valid
device
Spoofing
Information is intercepted and
manipulated
Man-in-the-middle

26. Greengrass with Hardware Security Integration
Mitigates these Risks
Only registered devices can
connect to Greengrass and
IoT cloud
Denial of Service
Hardware root-of-trust
identity for Greengrass Core
devices
Spoofing
Communication encrypted using
Transport Layer Security protocol
Man-in-the-middle

27. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass hardware security integration
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced Security Greater Flexibility
AWSOn-Premise Data AggregationVideo Cameras
API Gateway
certs/private.key
Logic Supply
ML350G-10
IN
IN
Cameras

28. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass hardware security integration
• How can I get started?
2. Update AWS IoT Greengrass
configurations to point to that
private key, rather than the file
system private key
3. Integrate with AWS IoT
Greengrass Secrets Manager
by updating configurations
1. Follow vendor
directions to generate a
private key on your secure
element
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

29. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass hardware security integration:
Partners
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

30. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Greengrass HSI Devices searchable in the AWS Partner
Device Catalog
https://devices.amazonaws.com/sear
ch?kw=HSI&page=1
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

31. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Device Tester is available for download on AWS
IoT Greengrass product page
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

32. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility

33. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Isolation and permission configurations
Customers want to test AWS IoT Greengrass in a diverse set of environments
Run AWS IoT Greengrass with
fewer dependencies and no
kernel-level changes
Access more local resources like
Bluetooth Low Energy or USB
devices
Run AWS IoT Greengrass in a
Docker container
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

34. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Easier to add AWS IoT Greengrass to existing architecture
that uses Docker containers for isolation
Existing applications running in
separate Docker containers
Application A
Run AWS IoT
Greengrass in a Docker
container
Application B
On-Premise Device
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

35. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
New modes provide flexibility in configuring AWS IoT
Greengrass
• Today: AWS IoT Greengrass with per-
Lambda container isolation
• New: Run Greengrass as an OS process.
Lambdas and Greengrass Group have
no container
• New: Hybrid mix of isolated Lambdas
and Lambdas as OS processes
AWS IoT Greengrass Core (1.7.0) with Greengrass
Containers
Device Resources accessed via
Local Resource Access
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

36. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
New modes provide flexibility in configuring AWS IoT
Greengrass
• Today: AWS IoT Greengrass with per-
Lambda container isolation
• New: Run Greengrass as an OS process.
Lambdas and Greengrass Group have
no container
• New: Hybrid mix of isolated Lambdas
and Lambdas as OS processes
AWS IoT Greengrass Core (1.7.0) with Greengrass
Containers
Device Resources accessed
directly
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

37. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
New modes provide flexibility in configuring AWS IoT
Greengrass
• Today: AWS IoT Greengrass with per-
Lambda container isolation
• New: Run Greengrass as an OS process.
Lambdas and Greengrass Group have
no container
• New: Hybrid mix of isolated Lambdas
and Lambdas as OS processes
AWS IoT Greengrass Core (1.7.0) with Greengrass
Containers
Device Resources accessed
directly
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

38. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
New AWS per-Lambda isolation and permission settings
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

39. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
New AWS per-Lambda isolation and permission settings
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

40. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Run Greengrass in Docker on Mac OS X or Windows 10
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater Flexibility

41. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IoT Greengrass release v1.7
• Simplified deployments
• AWS IoT Greengrass Connectors
• Enhanced security
• AWS IoT Greengrass Secrets Manager
• AWS IoT Greengrass Hardware Security
Integration
• Greater flexibility
• AWS IoT Greengrass per-Lambda Isolation &
Permission Configurations
• Try it from the console
• Connectors and documentation available now
• Find qualified hardware
• Search the Amazon Partner Network Device
Qualification Portal for Greengrass HSI
[https://devices.amazonaws.com/search?kw=HSI&page=1]
• Use our Docker file
• Access a Greengrass Docker file here
• See documentation about pullling the Greengrass
Docker image from AWS ECR here
AWS IoT
Greengrass
Introduction
Simplified
Deployments
Enhanced
Security
Greater
Flexibility
Get Started!

42. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

43. Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Scott Allison
alliscot@amazon.com
Tatiana Cooke
tatcoo@amazon.com

44. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.