AWS IoT is a managed cloud platform that allows connected IoT devices to easily and securely interact with cloud applications and other devices. In this session, we will discuss how constrained devices can leverage the AWS IoT service to send data to the cloud and receive commands back to the device using the protocol of their choice. We will discuss how devices can connect securely using MQTT and HTTP protocols, and how developers and businesses can leverage the AWS IoT Rules Engine, Thing Shadows, and accelerate prototype development using AWS IoT Device SDKs. Finally, we will cover new features released since the launch of AWS IoT including integration with Amazon Machine Learning and Amazon ElasticSearch Service.

1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
David Yanacek, Principal Engineer, AWS IoT
8/11/2016
Getting Started with AWS IoT

2. What is so special about IoT?
• We are connecting the physical world
• Energy, scale, security
• Communication isn’t always stable
• Software on things
• Changing is hard, risky
• Where is the logic?

3. Goals:
1. The system of things
2. The life of a thing
3. The community of things
4. The wisdom of things

4. AWS IoT

5. AWS IoT

6. AWS IoT

7. AWS IoT

8. AWS IoT

9. AWS IoT

10. AWS IoT

11. The Story
A connected wind farm

13. Goals:
1. The system of things
2. The life of a thing
3. The community of things
4. The wisdom of things

14. Birth of a thing

15. Connecting a thing to AWS IoT
Keys PermissionsRegistration

16. • Register things so you can find them later
• Searchable attributes
• Define things by type
Thing registration

17. aws.amazon.com

20. Certificates and keys
• Private key (authenticate the device)
• Certificate (register the device with IoT)
• Root certificate authority (authenticate IoT)

21. Permissions
• Control what a thing is allowed to do
• Connect, publish, subscribe, receive
• Attach policy to certificates

22. Permissions
{
"Effect": "Allow",
"Action": "iot:Publish",
"Resource": [
"arn:*:topic/private-topic/${iot:ClientId}",
"arn:*:topic/open-topic-space/*"
]
},
{
"Effect": "Allow",
"Action": "iot:Subscribe",
"Resource": "arn:*:topicfilter/private-topic/${iot:ClientId}/*"
}

23. Connecting a thing to AWS IoT
Wizard to create certificate, keys, policy

24. Connecting a thing to AWS IoT

25. Configuring a thing to talk to AWS IoT
// Dependencies
const awsIot = require('aws-iot-device-sdk');
// Configure and connect to AWS IoT
const device = awsIot.device({
keyPath: 'device-123.key.pem',
certPath: 'device-123.crt.pem',
caPath: 'rootCA.pem',
clientId: 'WindTurbine001',
protocol: 'mqtt',
port: 8883,
host: 'your-account-endpoint.iot.us-east-1.amazonaws.com',
});

26. Configuring a thing to talk to AWS IoT
// Dependencies
const awsIot = require('aws-iot-device-sdk');
// Configure and connect to AWS IoT
const device = awsIot.device({
keyPath: 'device-123.key.pem',
certPath: 'device-123.crt.pem',
caPath: 'rootCA.pem',
clientId: 'WindTurbine001',
protocol: 'mqtt',
port: 8883,
host: 'your-account-endpoint.iot.us-east-1.amazonaws.com',
});
AWS IoT supports MQTT, WebSocket, HTTP

27. Birth of a thing

28. Intermediate certificate authority
locally provisioned
async registration

29. Intermediate certificate authority

30. Just-in-time registration
AWS
Lambda

31. Simplified device security
AWS-ECC508
AWS
Lambda

32. Goals:
1. The system of things
2. The life of a thing
3. The community of things
4. The wisdom of things

33. How can things interact?
• A thing can listen to a thing
• MQTT / WebSocket
• A thing can command others
• Querying/updating a shadow’s state
• Things can create a group discussion
• Listen and discuss a topic
• Things‫׳‬ autocracy
• Rules engine
• Application logic
• Distributed

34. Demo
Let’s see it again – Wind turbine

35. Wind turbine telemetry flow
CONNECT
CONNECT

36. Wind turbine telemetry flow
SUBSCRIBE
turbine-1/data

37. Wind turbine telemetry flow
PUBLISH
turbine-1/data

38. Thing sending telemetry
// Craft a JSON message
var message = JSON.stringify({
rpm: 60,
current: 12
});
// Publish
device.publish('turbine-1/data', message);

39. App receiving telemetry
// Subscribe to messages on the turbine-1 topic
device.subscribe('turbine-1/data');
// Register a callback whenever we receive a message
device.on('message', function(topic, payload) {
// Print out the data we received
console.log('Got a message: ', topic, payload.toString());
});

40. Demo
Let’s see a command in action

41. AWS IoT – Thing’s shadow
Device
Shadow
Applications

42. AWS IoT device shadow - Simple yet powerful
{
"state" : {
"desired" : {
"lamp": "ON",
"fan" : "ON"
},
"reported" : {
"lamp": "OFF",
"fan" : "ON"
},
"delta" : {
"lamp": "ON",
} },
"version" : 10
}
Thing
Reports its current state to one or multiple shadows
Retrieves its desired state from shadow
Your application
Sets the desired state of a device
Gets the last reported state of the device
Shadow
Shadow reports delta, desired, and reported
states along with metadata and a version

43. Device
Shadow
Applications

44. Goals:
1. The system of things
2. The life of a thing
3. The community of things
4. The wisdom of things

45. Demo
Analyze wind farm performance

46. amzn.to/iotwindfarm

48. Rules engine

49. Rules engine: Extracting value from messages
• Filter messages with certain criteria
• Transform the payload of messages
• React based on messages
• Move messages to other topics
• Move messages to other systems
• Predict changes based on trends

50. Rules engine: Move messages to other systems
Invoke a Lambda function
Put object in an S3 bucket
Insert, update a
DynamoDB table
Publish to an SNS topic
or endpoint
Publish to an Amazon Kinesis
stream (and to EMR and Spark)
Publish to Firehose
Republish to AWS IoT
Publish to Amazon ES
Capture a CloudWatch
metric or change an alarm
Write to SQS queue

51. Rules engine: Move messages to other systems
Publish to Amazon Elasticsearch
Service
Write to SQS queue
Publish to an SNS topic
or endpoint

52. A rule in AWS IoT
aws iot create-topic-rule --rule-name WindFarmData --topic-rule-payload
{
"sql": "SELECT datapoint_id, current, rotation_speed, location,
topic(2) as turbine_id, timestamp() as time,
FROM 'wind-farm/+/data'",
"description": "Save data from wind turbines into Elasticsearch",
"actions": [
{
"elasticsearch": {
"roleArn": "arn:aws:iam::123456789012:role/aws_iot_windfarm",
"endpoint": "https://my-es-endpoint.us-west-2.es.amazonaws.com",
"index": "turbine-data",
"type": "measurement",
"id": "${CONCAT(datapoint_id, '_', turbine_id)}"
}}]}
RouteFilter, transform

53. Creating an Elasticsearch domain

54. Amazon Machine Learning Predict function

55. Summary:
1. The system of things
2. The life of a thing
3. The community of things
4. The wisdom of things

56. What’s next?
Getting Started
with AWS IoT
Blog and Forums
for AWS IoT
Github
AWS IoT Device SDK

57. Remember to complete
your evaluations!

58. @dyanacek