Presentation on serverless authentication from the SRE in a serverless world meetup in Amsterdam 06/12/2019

1. 1
Serverless authentication
Melvyn de Kort
Cloud Architect @ Portbase

2. Static website
Technologies:
• Amazon S3
• Amazon CloudFront - CDN
2

3. Static website
Technologies:
• Amazon S3
• Amazon CloudFront - CDN
But how do you solve:
• Authentication?
• Authorization?
• Logging?
3

4. What do we need?
Technologies:
• Amazon S3
• Amazon CloudFront - CDN
• Auth0 - Google implementation
• Amazon API Gateway
• AWS Lambda
4

5. What do we need?
Technologies:
• Amazon S3
• Amazon CloudFront - CDN
• Auth0 - Google implementation
• Amazon API Gateway
• AWS Lambda
Deployment tools:
• AWS CloudFormation
• AWS Serverless Application Model (AWS SAM)
5

6. Solution design
6

7. Sequence diagram
7

8. 8

9. Behind the scenes
• Amazon CloudFront
• Amazon API Gateway
• Auth0
• AWS CloudFormation
• Code of static website
• Code of convert-jwt
9

10. Next steps
Throttling and Caching:
• Throttling of requests
• Request quota limits
• Cached responses for duplicate requests
10

11. Next steps
Throttling and Caching:
• Throttling of requests
• Request quota limits
• Cached responses for duplicate requests
Monitoring:
• CloudWatch alarms
• CloudWatch dashboard
11

12. More information
https://melvyn.dev
https://github.com/melvyndekort/example-melvyn-dev
https://github.com/melvyndekort/convert-jwt
12

13. Thank you!