SaaS Jumpstart: A Primer for Launching Your SaaS Journey (ARC210-R2) - AWS re:Invent 2018

•

0 likes•671 views

Adopting a SaaS model is no trivial effort. Wandering into the universe of multi-tenancy means tackling a broad range of new architectural challenges. How do you automate the onboarding and provisioning of new tenants? How do you secure a shared multi-tenant infrastructure and prevent any flavor of cross-tenant access? How do you effectively partition tenant data? These are amongst a core set SaaS architecture topics in this chalk which is aimed at equipping SaaS newcomers with a clear view of some of the best practices associated with delivering SaaS solutions on AWS. The goal here is to explore and discuss fundamental architectural strategies of SaaS and highlight key considerations that will shape the security, agility, and success of your SaaS applications.

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
SaaS Jumpstart: A Primer for Launching Your
SaaS Journey
Michael Beardsley
Partner Solutions Architect
mibeard@amazon.com
A R C 2 1 0

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
The SaaS architecture challenge
SaaS
Agility
Continuous
delivery
Identity
Management
& monitoring
Scale &
availability
Storage
partitioning
Billing &
metering
Analytics

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Core components of SaaS architecture
Tenant on-boarding
Identity
Tenant isolation
Data partitioning
Metering&billing
Management&
monitoring
Profiling&analytics
Operations
Application

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Multi-tenant strategies
TenantTenant
Tenant
Tenant
Tenant Tenant
Tenant Tenant Tenant
Tenant
Tenant Tenant Tenant
Tenant Tenant Tenant
Tenant Tenant Tenant
Tenant Tenant Tenant

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Applying tenant context
AuthenticationOn-boarding
Authorization
Monitoring and analytics
Application
services
Storage
partitioning
Metering
Billing & account
management
Service
Service
Tenant2Tenant1
Tenantisolation

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Isolation patterns
Account 1
Web tier
App tier
Account 2
Web tier
App tier
Web tier
App tier
Tenant 1
VPC
Web tier
App tier
Tenant 2
VPC
Web tier
App tier
IAM
policies
All tenants

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Best of both worlds
Tenant 1
Web tier
App tier
Tenant 2
Web tier
App tier
Web tier
App tier
Tenants 3 … n

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data partitioning approaches
Tenant 1
Storage
Tenant 2
Storage
Tenant 1
Schema
Tenant 2
Schema Tenant ID Item ID
T1 7d1a93
T2 b38953
Schema

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Partitioning for different data services
T1
T2
T1
T2
T1
cluster
T2
cluster

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Serverless SaaS
Static web content
Amazon
CloudFront
Storage
services

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Session repeats
Wednesday, Nov 28
ARC 210 - SaaS Jumpstart: A Primer for Launching Your SaaS Journey
5:30 p.m. – 6:30 p.m. | Aria West, Level 3, Ironwood 8, T1
Thursday, Nov 29
ARC 210 - SaaS Jumpstart: A Primer for Launching Your SaaS Journey
1:45 p.m. – 2:45 p.m. | MGM, Level 1, South Concourse 105, T2

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Related breakouts
Tuesday, Nov 27
ARC324 - Architecting Next Generation Serverless SaaS Solutions on AWS
4:00 – 5:00 | Venetian, Level 2, Venetian E
Wednesday, Nov 28
ARC418 - Deconstructing SaaS: Deep Dive into Building Multi-Tenant Solutions on AWS
12:15 – 1:15 | Mirage, Mirage Event Center B
Thursday, Nov 29
ARC418 - Deconstructing SaaS: Deep Dive into Building Multi-Tenant Solutions on AWS
(Repeat)
4:00 – 5:00 | Aria West, Level 3, Ironwood 5

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Related chalk talks
Wednesday, Nov 28
ARC326 - Migrating Single-Tenant Applications to Multi-Tenant SaaS
4:00 – 5:00 | Aria West, Level 3, Starvine 7
Friday, Nov 30
ARC325 - SaaS Analytics and Metrics: Capturing and Surfacing the Data That's Fundamental to your Success
10:00 – 11:00 | Venetian, Level 4, Lando 4305
Wednesday, Nov 28
ARC419 - Optimizing Your SaaS Architecture on AWS
1:00 – 2:00 | Venetian, Level 3, Murano 3202

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Related workshops
Friday, Nov 30
ARC327 - Hands-on SaaS: Constructing a Multi-Tenant Solution on AWS
9:15 – 11:30 | Mirage, Mirage Event Center C2

Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Michael Beardsley
mibeard@amazon.com

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

In this chalk talk, we show you how to build a connected, frictionless retail checkout experience, inspired by Amazon Go. We briefly explain the user experience, technical specifications, and we then delve into the implementation details of the project. We show you how to create SSD Object Detection and Visual Search models in Amazon SageMaker with the details of the end-to-end lifecycle of the dataset, including creation, training, tuning and deployment. We also, show you how to write AWS Lambda functions for IoT edge devices with AWS Greengrass, and how AWS Greengrass can interact simultaneously with IoT sensors, such as a door or weight. Finally, we explain the details of a sensor fusion algorithm that combines the data to the customer purchase transaction.

Network Foundations on AWS (GPSCT409) - AWS re:Invent 2018

Amazon Web Services

Networking is the foundation upon which a great many things are built on AWS. As such, it is one of the first and most important things to consider when architecting with AWS. In this session, we review AWS networking architectures, covering both the basics on AWS networking to get you started as well as some of the most complex architectures you will encounter, including transit VPCs, building hybrid networking architectures, new AWS networking features, and how to integrate AWS network and security partner solutions.

Governance at Scale (SEC349-R1) - AWS re:Invent 2018

Amazon Web Services

As AWS customers accelerate their AWS adoption, and go from a few AWS accounts to support pilot applications to an enterprise migration strategy, they may encounter common challenges that slow down migrations. As your organization moves beyond a handful of accounts and applications, you might get questions like: How do I control budgets across many accounts, workloads, and users in a large organization? How do I automate account provisioning and maintain good security when hundreds of users and BUs are requesting cloud resources? How can I automate compliance to ensure the organization is adhering to enterprise security requirements? The governance at scale solution provides customers an enterprise governance “blueprint” that enable organizations to move faster, and with increased confidence, to AWS.

Deep Dive into the AWS Connected Vehicle Reference Solution (AMT303) - AWS re...

Amazon Web Services

Automotive companies are building next generation connectivity platforms on AWS to take advantage of the advanced analytics and Auto-Scaling features of the cloud. In this workshop, we walk through the use cases demonstrated in the AWS connected vehicle solution, such as anomaly detection and trip aggregation processing, as well as the core services in the solution: AWS IoT, AWS Greengrass, AWS Lambda, Amazon DynamoDB, Amazon Kinesis Data Analytics, and Amazon S3. Participants deploy the connected vehicle solution using an AWS CloudFormation template, and get hands-on experience deploying the AWS IoT Framework for Automotive Grade Linux (AGL) on automotive-grade hardware. By the end of the session, attendees have a working solution for publishing data from the device to the AWS connected vehicle solution deployed in their accounts, and they can begin customizing with their own devices.

Have Your Front End and Monitor It, Too (ANT303) - AWS re:Invent 2018

Amazon Web Services

Amazon Elasticsearch Service (Amazon ES) is both a search solution and a log monitoring solution. In this session, we address both. We build a front-end, PHP web server that provides a search experience on movie data as well as backend monitoring to send Apache web logs, syslogs, and application logs to Amazon ES. We tune the relevance for the search experience and build Kibana visualizations for the log data. In addition, we use security best practices and deploy everything into a VPC.

Automate & Audit Cloud Governance & Compliance in Your Landing Zone (ENT315-R...

Amazon Web Services

The document discusses automating and auditing cloud governance and compliance in AWS landing zones. It describes establishing foundational accounts and organizational structures using AWS Organizations and shared services accounts. It also discusses implementing logging, monitoring and auditing of activity and configurations using services like AWS CloudTrail, AWS Config, and AWS Lambda. The document provides examples of automating security responses by sending events to responders using AWS Lambda.

Serverless State Management & Orchestration for Modern Apps (API302) - AWS re...

Amazon Web Services

The document discusses serverless state management and orchestration using AWS Step Functions. It provides examples of how companies like Xylem, Coinbase, Granular and Novartis Institutes for Biomedical Research have used Step Functions to build modern applications. Specifically, it highlights how Step Functions enabled these companies to scale workflows, integrate legacy and modern systems, improve reliability and reduce costs. The document also provides technical details on how Step Functions can be used to orchestrate tasks and process large datasets across multiple AWS services.

Update Microcontroller Devices Over-the-Air with Amazon FreeRTOS (IOT304-R1) ...

Amazon Web Services

Dive into over-the-air (OTA) updates with Amazon FreeRTOS. Amazon FreeRTOS makes deploying OTA updates for microcontroller-based devices less memory-intensive by communicating those updates over a single TLS connection shared with other AWS IoT Core communications. You provide a firmware image, select the devices to update, select a code signing method, and schedule the update, all within the AWS IoT Device Management Console. You can use OTA updates to deploy security updates, bug fixes, and new firmware updates to devices in the field.

In this session, Verizon shares how it uses AWS Systems Manager for inventory, compliance, and patch management solutions. Learn about the challenges that large enterprises face when they attempt to retrofit legacy solutions for cloud environments, and discover best practices for using AWS Systems Manager for minimal access policies, custom Amazon Machine Images, tagging policies, encryption, and more.

Private Network Connectivity: Connecting AWS into Public Sector Networks (WPS...

Amazon Web Services

Machine Learning for the Enterprise, ft. Sony Interactive Entertainment (ENT2...

Amazon Web Services

Machine learning is powering innovation across industries, including media & entertainment, healthcare, finance, and many more. In this session, representatives from AWS and Sony Interactive Entertainment discuss building real-world scalable enterprise solutions with machine learning using Amazon SageMaker. Join us as we talk about managing large-scale systems and processes to get more value from data at any scale, with examples from Sony and AWS.

Voice-Powered Serverless Analytics (SRV240-R1) - AWS re:Invent 2018

Amazon Web Services

As a business manager, imagine asking Alexa within a skill that was specifically built for your organization for key insights into your business, such as “Who is our largest customer in Northern California?” or “How has our sales volume grown between Q1 and Q2 in our Asian markets?” In this workshop, you build an Alexa skill that queries metrics from a data lake that you define. The goal is for you to understand how to uncover key performance indicators (KPIs) from a dataset, build and automate queries with AWS Lambda, and access them via Alexa voice-enabled devices. Startups can make available voice-powered analytics to query at any time, and enterprises can deliver these types of solutions to stakeholders so they can have easy access to the business KPIs that are top of mind.

Configuration Management and Service Discovery with AWS Lambda (SRV338-R1) - ...

Amazon Web Services

Your system is composed of highly decoupled, independent, fast, and modular microservices. But how can they share common configurations, dynamic endpoints, database references, and properly rotate secrets? Based on the size and complexity of your serverless system, you may use AWS Lambda environment variables, AWS Systems Manager's Parameter Store, and the recently announced AWS Secrets Manager. In this session, we showcase the best use cases for each solution, as well as corresponding best practices to achieve the highest standards for security and performance.

Build and Deploy Robot Applications Easily (ROB302-R) - AWS re:Invent 2018

Amazon Web Services

We’ll use an object detection robot as an example to show how AWS RoboMaker can help you build the robot of your dreams. We’ll do a deep dive into the architecture of our robot application. You’ll learn how it uses various AWS services to detect and react to objects. Along the way, we’ll show you how AWS RoboMaker makes it easy to develop and test such applications. Finally, we’ll dive into how AWS RoboMaker deploys your application to a fleet of robots.

[NEW LAUNCH!] Introducing AWS App Mesh – service mesh on AWS (CON367) - AWS r...

Amazon Web Services

Managing Connected Devices at Scale with AWS IoT Device Management, ft. Hudl ...

Amazon Web Services

IoT deployments often consist of thousands to millions of devices deployed across multiple locations. It is essential to have a solution to track, monitor, and manage your connected device fleets at scale. In this session, learn how AWS IoT Device Management can help you onboard, remotely manage, and monitor your connected devices. In this session, we discuss key features of AWS IoT Device Management, including fleet indexing and search, remote commands, over-the-air (OTA) updates, and device monitoring. Learn how AWS IoT Device Management can help you scale your fleets and reduce the cost and effort of managing IoT device deployments. Also, representatives from Hudl, the world leader in sports video analysis, discuss how the company is changing the recording and upload process for high schools across the country with their newest product, Hudl Focus.

“Cloud First” Helps Hub Intl Grow the Business with Splunk on AWS (ANT330-S) ...

Amazon Web Services

What does “Cloud First” really mean for your processes, customers, and the future of your business? In this session, learn from Hub International’s CISO and Head of Architecture how the insurance company is transforming their business by migrating to the cloud for greater scale, cost savings, performance, and security. With a goal to go all-in on AWS by end of 2018, Hub International needed real-time visibility across its cloud and hybrid environments to mitigate risks and ensure seamless migrations—thereby keeping customers happy and their data safe. See how Hub International is harnessing machine data and predictive analytics to secure applications and infrastructure, control costs and improve capacity planning. This session is brought to you by AWS partner, Splunk.

ALB User Authentication: Identity Management at Scale with Netflix (NET204) -...

Amazon Web Services

In the zero-trust security environment at Netflix, identity management has historically been a challenge due to the reliance on its VPN for all application access. About one year ago, Netflix began exploring various identity solutions to alleviate the operational burden of maintaining its VPN. Additionally, it was looking for ways to provide a superior user experience. Join this chalk talk to learn how Netflix solved identity management at scale.

MassMutual Goes Cloud First with Hybrid Cloud on AWS (ENT210) - AWS re:Invent...

Amazon Web Services

In this session, we discuss how MassMutual adopts a cloud-first strategy, and we outline their journey to hybrid cloud on AWS. Specifically, we cover four aspects of MassMutual's hybrid cloud on AWS architecture: First, we talk about the use of the AWS Well-Architected Framework to create MassMutual’s cloud minimal viable product (MVP) document. Next, we do a deep dive into MassMutual's multi-account, multi-region architecture. We discuss achieving cloud governance, risk, and compliance through tooling and automation. Finally, we demonstrate how MassMutual deploys fully compliant hybrid cloud environments in less than five minutes. We also showcase some of MassMutual's actual hybrid deployments and share the benefits of using AWS.

DevOps Concepts for Data Science (DEV347-R2) - AWS re:Invent 2018

Amazon Web Services

DevOps and Data Science? How does that work? In software teams where innovation is a priority, DevOps can be an accelerator. In data science and machine learning, there are a number of factors that increase complexity of systems and thus the complexity of DevOps. This session will touch on fundamental concepts in data science such as data management, ETL, modeling, and model validation, and open discussion around some ways that common tools and processes can be used to decouple and stabilize workflows to accelerate research.

Serverless Architectural Patterns and Best Practices (ARC305-R2) - AWS re:Inv...

Amazon Web Services

The document discusses serverless architectures and best practices. It covers topics like serverless foundations, web applications, stream processing, data lakes, and machine learning. It provides an overview of AWS serverless offerings and architectural patterns for building serverless applications and processing streaming data with services like AWS Lambda, Amazon API Gateway, Amazon Kinesis, Amazon S3, and AWS Step Functions.

Implementing Multi-Region AWS IoT, ft. Analog Devices (IOT401) - AWS re:Inven...

Amazon Web Services

This document discusses implementing multi-region architectures for AWS IoT. It begins by explaining why a multi-region approach is important for IoT applications. It then covers foundational aspects like account structure, device bootstrapping and configuration, and building single region resiliency. The document also presents variations on multi-region architectures like active-passive and active-active models. Finally, it discusses specific examples and considerations for Analog Devices' machine health monitoring solution.

Lessons Learned from Building an AWS Service on AWS Lambda (SRV327-R1) - AWS ...

Amazon Web Services

Get a behind-the-scenes look at how an AWS service team builds and operates the production APIs and services that power the AWS Serverless Application Repository. In this session, we discuss best practices and lessons learned from building and operating a completely serverless backend. Learn tips for managing serverless development projects, building APIs, processing streaming data, and monitoring production applications for a service built with more than 200 Lambda functions.

Deploying Your ONNX Deep Learning with Apache MXNet Model Server (AIM413) - A...

Amazon Web Services

This document discusses deploying deep learning models in ONNX format with the Apache MXNet Model Server. It describes how ONNX serves as a common format that can be exported from many frameworks and imported into MXNet. It also outlines how the MXNet Model Server provides an API and containerization for serving models, and how it can be deployed in serverless environments on AWS Fargate for scalable inference.

Build a Searchable Media Library & Moderate Content at Scale Using Machine Le...

Amazon Web Services

Companies have to process, analyze, and extract meaning from ever-growing volumes of audio, image, and video data. Automating media workflows, such as image and video indexing or manual transcription for closed captions, can help you scale the growth of your media library and save time from manual, error-prone work. In this workshop, you learn how to automate workflows using the Media Analysis Solution, which includes Amazon Rekognition, Amazon Transcribe, and Amazon Comprehend. You learn how to extract metadata from media files and create a searchable library of metadata.

What's New with Amazon Redshift ft. McDonald's (ANT350-R1) - AWS re:Invent 2018

Amazon Web Services

Learn about the latest and hottest features of Amazon Redshift. We’ll deep dive into the architecture and inner workings of Amazon Redshift and discuss how the recent availability, performance, and manageability improvements we’ve made can significantly enhance your user experience. We’ll also share glimpse of what we are working on and our plans for the future. McDonald's will join us to share how they leverage a data lake powered by Redshift, Redshift spectrum and Athena to get quick insights.

Best Practices for Safe Deployments on AWS Lambda and Amazon API Gateway (SRV...

Amazon Web Services

Deploying frequently is fundamental to reduce the feedback loop and increase developer productivity. There are multiple features available in AWS Lambda, Amazon API Gateway and AWS SAM that can be used to implement a continuous deployment pipeline using safe deployment strategies such as canary releases. In this session, we'll review the possible options applied to different scenarios such as microservices architectures, chaos engineering, and A/B testing, to find out the best practices for your use cases. You will also hear how teams at Capital One created a deployment pipeline using AWS SAM and AWS CodeDeploy for canary deployments for the Capital One Credit Offers API, which is built on Golang and AWS Lambda.

Serverless:It All Started in Vegas (DVC306) - AWS re:Invent 2018

Amazon Web Services

This talk dives into Trustpilot's journey to serverless compute. The journey starts at re:Invent 2016 and follows how the company fast-tracked its adoption within its engineering organization using a "serverless first" engineering principle. A representative from Trustpilot shares lessons learned and insights gained from running over 200 AWS Lambda functions with 12M invocations/day in production. Also covered are fun stories of what helped the company adopt serverless, how to make those stories actionable, a review of architectural patterns, and a discussion of why they choose serverless over traditional compute every day. This session is part of re:Invent Developer Community Day, a series led by AWS enthusiasts who share firsthand technical insights on trending topics.

Architecting Next Generation Serverless SaaS Solutions on AWS (ARC324-R1) - A...

Amazon Web Services

The emergence of serverless infrastructure and services represents a fundamental shift in how developers approach architecting applications. This is especially relevant in the world of SaaS where systems must efficiently and cost-effectively respond to continually shifting multi-tenant loads and profiles. We’ll conduct an end-to-end review of all the elements of a serverless SaaS architecture that leverages a combination of AWS Lambda, Fargate, and Aurora Serverless. We’ll look at how serverless influence the core elements of your architecture, including tenant isolation, service decomposition, management and monitoring, deployment, and identity.

SaaS Reference Architectures: Review of Real-World Patterns & Strategies (GPS...

Amazon Web Services

There is no single approach to building SaaS applications on AWS. Domain, compliance, performance, legacy considerations, and business forces all play a big role in shaping the architecture of your solutions. While there are many strategies for implementing SaaS on AWS, there are some common architectural patterns that are used to address the varying needs of SaaS providers. In this session, we review in detail a collection of SaaS reference architectures that represent a spectrum of approaches to addressing identity, onboarding, storage partitioning, tenant isolation, billing, deployment, regional distribution, and operational models. Our goal is to provide a menu of concrete solutions that can provide insights into how AWS constructs are leveraged to realize SaaS best practices on AWS.

What's hot

Managing Modern Infrastructure in Enterprises (ENT227-R1) - AWS re:Invent 2018

Amazon Web Services

Private Network Connectivity: Connecting AWS into Public Sector Networks (WPS...

Amazon Web Services

Machine Learning for the Enterprise, ft. Sony Interactive Entertainment (ENT2...

Amazon Web Services

Voice-Powered Serverless Analytics (SRV240-R1) - AWS re:Invent 2018

Amazon Web Services

Configuration Management and Service Discovery with AWS Lambda (SRV338-R1) - ...

Amazon Web Services

Build and Deploy Robot Applications Easily (ROB302-R) - AWS re:Invent 2018

Amazon Web Services

[NEW LAUNCH!] Introducing AWS App Mesh – service mesh on AWS (CON367) - AWS r...

Amazon Web Services

Managing Connected Devices at Scale with AWS IoT Device Management, ft. Hudl ...

Amazon Web Services

“Cloud First” Helps Hub Intl Grow the Business with Splunk on AWS (ANT330-S) ...

Amazon Web Services

ALB User Authentication: Identity Management at Scale with Netflix (NET204) -...

Amazon Web Services

MassMutual Goes Cloud First with Hybrid Cloud on AWS (ENT210) - AWS re:Invent...

Amazon Web Services

DevOps Concepts for Data Science (DEV347-R2) - AWS re:Invent 2018

Amazon Web Services

Serverless Architectural Patterns and Best Practices (ARC305-R2) - AWS re:Inv...

Amazon Web Services

Implementing Multi-Region AWS IoT, ft. Analog Devices (IOT401) - AWS re:Inven...

Amazon Web Services

Lessons Learned from Building an AWS Service on AWS Lambda (SRV327-R1) - AWS ...

Amazon Web Services

Deploying Your ONNX Deep Learning with Apache MXNet Model Server (AIM413) - A...

Amazon Web Services

Build a Searchable Media Library & Moderate Content at Scale Using Machine Le...

Amazon Web Services

What's New with Amazon Redshift ft. McDonald's (ANT350-R1) - AWS re:Invent 2018

Amazon Web Services

Best Practices for Safe Deployments on AWS Lambda and Amazon API Gateway (SRV...

Amazon Web Services

Serverless:It All Started in Vegas (DVC306) - AWS re:Invent 2018

Amazon Web Services

What's hot (20)