The document discusses Amazon Web Services (AWS) Internet of Things (IoT) solutions for connecting, managing and gaining insights from IoT devices. It provides an overview of the AWS IoT platform and services, including AWS IoT Core for device connectivity, AWS IoT Device Management for device onboarding and updates, AWS IoT Device Defender for security, and using AWS services like analytics for extracting value from device data.

1. IoT State of Union
Ivan Cheng (鄭志帆) - AWS Solutions Architect
January 2018

2. If you knew the state of every thing and
could reason on top of that data…
what problems would you solve?
If you knew the state of every thing and
could reason on top of that data…
what problems would you solve?

3. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Customers

4. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Things
Sense & Act
Cloud
Storage & Compute
Intelligence
Insights & Logic → Action
Concept of IoT

5. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
AWS IoT Core
Things
Sense & Act
Cloud
Storage & Compute
Intelligence
Insights & Logic → Action

6. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
AWS AWS IoT Core
Gateway
Endpoints
Greengrass
Things
Sense & Act
Cloud
Storage & Compute
Intelligence
Insights & Logic → Action

7. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Secure device
connectivity
and messaging
GatewayEndpoints
AWS
Greengrass AWS IoT
Core
Things
Sense & Act
Cloud
Storage & Compute

8. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Secure device
connectivity
and messaging
Endpoints
AWS IoT
Core
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
Gateway
AWS Greengrass
Things
Sense & Act
Cloud
Storage & Compute

9. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Secure device
connectivity
and messaging
GatewayEndpoints
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS Greengrass
AWS IoT
Core
Things
Sense & Act
Cloud
Storage & Compute

10. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How can I
manage my
growing number
of connected
devices?

11. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1. Fast device
onboarding at scale
2. Real-time fleet
indexing and search
3. Over the air updates
oT Device Management

12. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Batch fleet
provisioning
Real-time
fleet index & search
Fine grained
device logging
& monitoring
Over the
air updates
Maintain fleet health
AWS IoT Device Management

13. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thing registration
+
"Parameters" : {
"ThingName" : { "Type" : "String" },
"SerialNumber" : { "Type" : "String" },
"Location" : { "Type" : "String",
"Default" : "WA“ },
"CSR" : { "Type" : "String“ }
}
"Resources" : {
"thing" : {
"Type" : "AWS::IoT::Thing",
"Properties" : {
"ThingName" : {"Ref" : "ThingName"},
"AttributePayload" : {
"version" : "v1",
"serialNumber" : {"Ref" : "SerialNumber"}
},
"ThingTypeName" : "lightBulb-versionA",
"ThingGroups" : ["v1-lightbulbs", {"Ref" : "Location"}]
}
},
"certificate" : { "Type" : "AWS::IoT::Certificate", "Properties" : {
"CertificateSigningRequest": {"Ref" : "CSR"}, "Status" : "ACTIVE" }
}

14. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Custom authorizers
X.509
Certificate
AWS SigV4 Instances
Corporate data
center
Key/token
IoT thing
lightbulb
IAM
Lambda
function
AWS IoT

15. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Fleet indexing and search
Luc ene - lik e quer ies

16. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Jobs
Control + monitoring

17. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Philips HealthSuite Connect
Services and AWS IoT Device
Management

18. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Philips HSDP Connect Services
Philips Device
Philips
IAM
Custom Auth Lambda
Custom Auth LambdaIoT Gateway
Route53 API Gateway
Thing Registry
Groups & Type
Business LambdaJobs
DynamoDB
Blob Store
IoT Rules
Templates
CloudWatch
CloudFormation

19. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Sense & Act Storage & Compute
Things Cloud
Secure device
connectivity
and messaging
GatewayEndpoints
AWS IoT
Core
AWS Greengrass
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
AWS IoT Device
Management
IoT data
analytics and
intelligence

20. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How do I ensure
my connected
devices stay
secure?

21. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
oT Device Defender
1. Audit devices,
set security
parameters, and
monitor behavior
2. Detect drifts
in policy
and identify
anomalies
4. Take action3. Generate alerts
Device Security
(OTA updates
with AWS IoT
Device Management)

22. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Device Defender
Audit device
configurations
Monitor device
behavior
Generate
alerts
Identify
anomalies
Keep your fleet secure
Patch security
vulnerabilities

23. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Sense & Act Storage & Compute
Things Cloud
Secure device
connectivity
and messaging
GatewayEndpoints
AWS IoT
Core
AWS Greengrass
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT
Device
Defender

24. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How do I
generate value
from my device
data?
10101
1 0 0 1 0
01010
01010
101001
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
01010
101001
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0

25. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 1 0 1 1 0
1 0 1 0 1 0 0 1 1 0
1 0 1 0 1 0 1 1 0 1
0 1 0 1 0 1 1 0 1 0
1 0 0 1 0 0 1 0
ENRICHMENT10101 1 0 0 1 0
01010
01010
101001
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 01 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
0101001010
101001
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 1 0 1 0 1
0 1 0 1 0 1 0 1 0 1
0 1 0 1 0 0 1 0 1 0
0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 0 1 0 1 0
1. IoT data is noisy
and contains gaps
and false readings
2. Filter, process,
transform, and enrich
your data
4. Ad-hoc queries
or sophisticated
IoT analytics and
visualization
3. Store raw data
and processed
data
0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 1 0
1 0 1 0 1 0 0 1 1 0 1 0 1 0 1
0 1 1 0 1 0 1 0 1 0 1 1 0 1 0
0 1 1 0 0 1 0 0 1 0 0 1 0 1 0
1 0 1 0 1 0 1 0 1 0 1 0 1 0 1
1 0 1 0 1 1 0 1 0 0 1 1 0 0 1
0 0 1 0 0 1 0 1 0 1 0 1 1 0 0
1 0 0 1 0 1 0 1 0 1 0 1 0 1 0
1 0 1 0 1 0 1 1 0 1 0 1 1 0 1
0 0 1 1 0 0 1 0 0 1 0 0 1 0 1
WS IoT Analytics

26. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Analytics
Easily analyze IoT data
IoT data
collection from
multiple sources
Ad-hoc queries
& QuickSight
integration
Data
(pre-)processing
and enrichment
Fully managed
storage
(raw & time-series)
In-depth analysis
with Jupyter
Notebooks

27. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Analytics components
DatasetsPipelines
Collect Preproces
s & enrich
Store Analyze & visualize,
machine learning
Channels Datastores Notebooks & Amazon
QuickSight
QueryCreate IoT data
Operational and
business
applications

28. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Sense & Act
Storage & Compute &
Learn
Things Cloud
Secure device
connectivity
and messaging
GatewayEndpoints
AWS IoT
Core
AWS Greengrass
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT
Device
Defender
AWS IoT
Analytics

29. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How can I extend
the capabilities
of AWS IoT to
the edge?

30. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Data and
state sync
Local
actions
Local
triggers
Security
AWS Greengrass
Extend AWS IoT to the edge
Local ML
inference
Preview today
Over the air
updates
Protocol
adapter for
OPC-UA
Local
resource
access

31. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
New!
New Lambda languages
Local
actions

32. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Platform support
Ubuntu
Raspbian
Amazon Linux
Generic Linux
OpenWRT (coming soon)
Yocto (coming soon)
Wind River (coming soon)
Packaged OVA
Share local resources
Trigger Greengrass activity
based on VMWare operations
Trigger VMWare activity
based on Greengrass events
Tech preview coming soon
Open source recipe to create
your own GGC Docker Image
Coming soon to AWS Labs

33. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT Architecture
Sense & Act
Storage & Compute &
Learn
Things Cloud
Secure device
connectivity
and messaging
GatewayEndpoints
AWS IoT
Core
AWS Greengrass
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT
Device
Defender
AWS IoT
Analytics

34. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How can I
securely connect
constrained,
microcontroller-
based devices?
?

35. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1. Will it work on my chip? 2. Does it have the
functionality I need?
4. How do I start?3. Where do I get it?
10101011010
10111010110
10101010101
00101010101
00101001010
10111010101
10011001011
00100101101
Real time embedded operating system
?
on FreeRTOS

36. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1. Will it work on my chip? 2. Does it have the
functionality I need?
4. How do I start?3. Where do I get it?
EMBEDDED APPS
FreeRTOS
HW DRIVERS
SECURTIY
LIBRARIES
CONNECTIVITY
LIBRARIES
OVERTHAAIR
(OTA)AGENT
CLOUD&
GREENGRASS
LIBRARIES
HELLO
Amazon FreeRTOS

37. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Local connectivity
libraries
Cloud connectivity
libraries
Security
libraries
OTA &
code signing
Coming soon
Amazon FreeRTOS
IoT microcontroller OS
Based on FreeRTOS kernel
AWS Greengrass AWS IoT Core

38. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How do I get started?
Many places you can get Amazon FreeRTOS software
Visit the Amazon
FreeRTOS console
GitHub FreeRTOS.org SourceForge

39. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT with AWS
Enterprise
Applications
Enterprise
Users
Corp Apps
Amazon
QuickSight
Amazon
EMR
Amazon
Redshift
Amazon
S3
Machine
Learning
AWS
Lambda
All
AWS
IoT Partners
Edge
ARM, Broadcom, Digi,
Expressif, Intel,
MediaTek, Microchip,
NXP, ST, TI, Qualcomm,
…
Gateway
Adlink Technology,
Advantech, MachineShop,
Samsung, Technicolor, …
Platform
Ayala, Bright Wolf,
BSquare, C3IoT, Mnubo,
PTC, Salesforce, Splunk,
Thinglogix, …
Connectivity
Amdocs, Asavie, AT&T,
Eseye, Soracom, TATA
Communications, Telus,
Verizon, …
Consulting / ISVs
Accenture, Aricent,
Clearscale, CTP, Luxoft,
Mobiquity, Solstice,
Storm Reply, Sturdy
Networks, TCS, Trek10, …
Cloud
Device
Shadow
Rules
Engine
AWS IoT
Core
Certificate
Authority
AWS IoT
Device
Management
AWS
IoT
Users
Over-The-Air
(OTA)
Updates
Analytics
Data Store
Data
Pipelines
Templated
Reports
Batch Fleet
Provisioning
Real-Time
Fleet Index &
Search
AWS IoT
Device
Defender
Ad-hoc & In-
depth Analysis
Risk
Mitigation
Monitor
Device
Behavior
Alerts
Message
Broker
Audit Device
Configurations
Amazon
Kinesis
AWS IoT
Analytics
MQTT
MQTT
Endpoints Gateway/PLC
Device
Shadow
Snowball
Edge
AWS
Greengrass
Lambda
Functions
Message
Router
Local Comms Long-range Comms
Amazon
FreeRTOS
Certificate
Authority
Local
Resource
s
OPC-UA
Adapter
IoT SDK
OPC-UA
MQTT
Edge
Users
Cert
WiFi
MQTT
Edge
OTA
OTA
Amazon
FreeRTOS
Integrated
Client

40. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT with AWS
Enterprise
Applications
Enterprise
Users
Corp Apps
Amazon
QuickSight
Amazon
EMR
Amazon
Redshift
Amazon
S3
Machine
Learning
AWS
Lambda
All
AWS
IoT Partners
Edge
ARM, Broadcom, Digi,
Expressif, Intel,
MediaTek, Microchip,
NXP, ST, TI, Qualcomm,
…
Gateway
Adlink Technology,
Advantech, MachineShop,
Samsung, Technicolor, …
Platform
Ayala, Bright Wolf,
BSquare, C3IoT, Mnubo,
PTC, Salesforce, Splunk,
Thinglogix, …
Connectivity
Amdocs, Asavie, AT&T,
Eseye, Soracom, TATA
Communications, Telus,
Verizon, …
Consulting / ISVs
Accenture, Aricent,
Clearscale, CTP, Luxoft,
Mobiquity, Solstice,
Storm Reply, Sturdy
Networks, TCS, Trek10, …
MQTT
MQTT
Endpoints Gateway/PLC
Device
Shadow
Snowball
Edge
AWS
Greengrass
Lambda
Functions
Message
Router
Local Comms Long-range Comms
Amazon
FreeRTOS
Certificate
Authority
Local
Resource
s
OPC-UA
Adapter
IoT SDK
OPC-UA
MQTT
Edge
Users
Cert
WiFi
MQTT
Edge
OTA
OTA
Amazon
FreeRTOS
Integrated
Client
Cloud
Device
Shadow
Rules
Engine
AWS IoT
Core
Certificate
Authority
AWS IoT
Device
Management
AWS
IoT
Users
Over-The-Air
(OTA)
Updates
Analytics
Data Store
Data
Pipelines
Templated
Reports
Batch Fleet
Provisioning
Real-Time
Fleet Index &
Search
AWS IoT
Device
Defender
Ad-hoc & In-
depth Analysis
Risk
Mitigation
Monitor
Device
Behavior
Alerts
Message
Broker
Audit Device
Configurations
Amazon
Kinesis
AWS IoT
Analytics
Can we make IoT
even simpler?

41. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
WS IoT 1-ClickIoT
1. Acquire device 2. Configure & deploy 3. Extract reports
with 1-Click

42. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT 1-Click
Ready out-of-the-box
HW without device
specific code
Securely connect
to the cloud
Create actions
using Lambda
functions with
one click
Fleet identification
and reporting
Mobile
application
IoT service with one click

43. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Services
Sense & Act
Storage & Compute &
Learn
Things Cloud
Secure device
connectivity
and messaging
AWS IoT
Core
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT Device
Defender
GatewayEndpoints
AWS Greengrass
AWS IoT 1-Click
AWS IoT
Analytics
Amazon
FreeRTOS

44. Thank you!
Ivan Cheng (鄭志帆)
AWS Solutions Architect