Curious about AWS Mobile Services and latest updates? Attend this session for a deep dive on recent updates to AWS Mobile Services aimed at helping you build scalable, reliable, and feature-rich mobile apps. We’ll dig into the new features and discuss the relevant use cases. Specifically, we will cover the following releases: Amazon Cognito Your User Pools - Add sign-up and sign-on to your mobile apps, Amazon Simple Notification Service Global SMS - Send SMS messages to phone numbers in 200+ countries, and AWS Device Farm Remote Access - Gesture, swipe, and interact with iOS and Android devices in real time, directly from your web browser.

1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Vikram Madan, Sr. Product Manager
Pawel Wojnarowicz, Sr. Product Manager
August 11, 2016
What’s New with AWS Mobile Services
Deep Dive for Amazon Cognito Your User Pools,
Amazon SNS Global SMS, and AWS Device Farm

2. Amazon Cognito Your User Pools

3. Developing Auth infrastructure for your app
• Need to develop your own user directory to manage your users
• Getting security right for both user data and passwords is complicated
• Scalability of the app is often an afterthought
• Support for multiple social identity providers
• Federation with corporate directories for B2E applications
1
2
3
4
3
5

4. Amazon Cognito Identity
Federated Identities
Your users can sign in through third-party
identity providers, such as Facebook, Twitter,
and SAML providers, and you can control access
to AWS resources from your app.
Your User Pools
You can easily and securely add sign-up and
sign-in functionality to your mobile and web
apps with a fully managed service that scales to
support 100s of millions of users.
Launched GA on 7/28/2016
4

5. Comprehensive support for identity use cases
5

6. Your User Pools
Add user sign-up and sign-in
easily to your mobile and
web apps without worrying
about server infrastructure
Serverless Authentication
and User Management
Verify phone numbers and
email addresses and offer
multi-factor authentication
Enhanced Security
Features
Launch a simple, low-cost,
and fully managed service to
create and maintain a user
directory that can scale to
100s of millions of users
Managed User Directory
1 2 3
6

7. Comprehensive user flows
Email or phone number
verification
Forgot password
User registration and
authentication
Users verify their email address or phone number prior to activating an account
Users can change their password if they forget it
Users can sign up using an email, phone number, or username (and password). From
there, the user can then sign in to the application.
User profile data User can view and update profile data – including custom attributes
SMS-based MFA
Users complete Multi-Factor Authentication (MFA) by inputting a security code received
via SMS as part of the sign-in flow
Customize these user flows using Lambda
7

8. Custom user flows using Lambda hooks
Category Lambda Hook Example Scenarios
Authentication
Pre Authentication Custom validation to accept or deny the sign-in request
Post Authentication Event logging for custom analytics
Sign-Up
Pre Sign-up Custom validation to accept or deny the sign-up request
Post Confirmation Custom welcome messages or event logging for custom analytics
Messages Custom Message Advanced customization and localization of messages
8

9. Custom Auth flow
Amazon Cognito Your User Pools
Custom Authentication Challenges
(e.g., CAPTCHA or custom 2nd factors)
1
2 5
9
6
3
4

10. Extensive admin capabilities
Define custom
attributes
Set per-app permissions
Set up password
policies
Create and manage
user pools
Define custom attributes for your user profiles
Set read and write permissions for each user attribute on a per-app basis
Enforce password policies like minimum length and requirement of certain types
of characters
Create, configure, and delete multiple user pools across AWS regions
Require submission of
attribute data
Select which attributes must be provided by the user prior to completion of the
sign-up process
Search users
Search users based on a full match or a prefix match of their attributes through
the console or admin API
Manage users
Conduct admin actions, such as reset user password, confirm user, enable MFA,
delete user, and global sign-out
10

11. Remembered Devices
Remember the devices associated
with your users
1
How do I reduce the friction that
my users face when having to
complete the 2nd factor challenge
on every sign-in?
How do I build logic to associate
devices with my users to achieve
my specific business
requirements?
2
11

12. Amazon Cognito User Pools and Amazon API Gateway
Custom Authorizer Function Native Support
User Pools works together with API Gateway to
authorize API requests. You can configure API
Gateway to accept ID tokens to authorize users
based on their presence in a user pool.
You can control access to your APIs using bearer
token authentication strategies, such as OAuth
or SAML. The custom authorizer uses bearer
tokens to determine access privileges.
1 2
12

13. “Building an AWS serverless platform that manages sensitive customer
data requires an authentication strategy that protects the information
from unauthorized access. Using the Amazon Cognito user pool feature
together with AWS Lambda, we’re developing a flexible, fully integrated
solution that can scale effortlessly – a powerful tool that will be critical
in keeping our customers’ data secure.”
Feedback from our beta customers
“It is critical for us to provide a secure and simple sign-up and
sign-in experience for our tens of millions of end users. With
Amazon Cognito, we can enable that without having to worry
about building and managing any backend infrastructure.”
13

14. Demo
14

15. Amazon Simple Notification Service (SNS)
Global SMS

16. Current Capabilities of Amazon SNS

17. Amazon SNS
17
Global and Fast at
Massive Scale
Use via Java, Python, PHP,
Node.js, Objective-C, or
.NET
Send Messages to Any
Device or Endpoint
Support for Multiple
Platforms or Frameworks
Send billions of messages
per day with minimal
latencies across the world
“Fast, Flexible, Global Messaging to Any Device or Endpoint”
Amazon SNS
Send notifications via mobile
push, email, HTTP, or SMS; or
messages to Amazon SQS or
AWS Lambda
1 2 3

18. The SMS Market

19. Why is SMS still popular?
19
SMS uses mobile phone numbers
All forms of SMS and MMS use mobile phone numbers to identify a destination
Phone numbers are universally addressable
They can be used to reach a person regardless of geography, network carrier, or time-zone
Phone numbers are a strong identity mechanism
Most phone numbers are assigned after a government ID check, and therefore not owned by
bots
Almost every adult carries a mobile phone
4.77B mobile phones allocated across a total world population of 7.3B

20. But SMS lacks quality of service intelligence
20
Device
Carrier
Aggregator
Application
SMS does not provide end-to-end delivery acknowledgement
Unlike TCP/IP (or HTTP), Delivery Receipts (DLRs) only provide success / failure until “next-hop”
Legacy Telco value chain is driven by least cost routing
Increases latency, reduces deliverability and conversions

21. Building a reliable “one-hop” network is hard
21
2,050+ Telecom operators in 220 countries
800+ MNOs, 992 MVNOs, and 260 MNO sub-brands
All “one-hops” are not necessarily reliable
Sometimes a carrier-to-carrier interconnect may be
more reliable than a direct connect
Local regulations differ
Violating these causes interruption of service

22. Introducing Worldwide SMS

23. Features
23
200+ Destination Countries and Connectivity to 1100+ Telecom Carriers
Most Connections are “One-Hop”, thereby reducing latency and improving deliverability
Default Opt-In
Frictionless support for Multi-Factor Authentication and One-Time Password use-cases
Optimal Treatment per Traffic Type
Transactional routes optimized for deliverability while Marketing routes optimized for cost
Cost Control
Per-message Price Threshold and AWS Account-level Spend Threshold
Outbound Messaging Only
Inbound message processing for Opt-Out (STOP) or Help (HELP) where required by law

24. Adaptive worldwide connectivity
24
Device
Carrier
Aggregator
Application
Amazon
SNS
98%
73%
99%
98%
Adaptive routing dynamically picks best route to a destination phone number
SNS always has multiple routes to reach a phone number and picks the best based on deliverability data.

25. More features
25
Alphanumeric Sender ID Support
Most EU countries. Only numeric Sender ID for North America.
Usage Records
Usage detail records (UDRs) available in a self specified S3 bucket.
“Sticky” Sender ID
SMSs from an AWS account to a recipient’s phone is sent from the same “From” number.
Per-Message Delivery Status
Information such as from, to, disposition, price, and dwell time sent to CloudWatch Logs.
Deliverability Statistics
Per AWS account per traffic-type, as well as overall per traffic-type.
LM-ABCD

26. Local restrictions solved
26
Message:
11:30 AM
Message:
Gate change alert! Your
flight from Rio de Janeiro
(GIG) to Manaus (MAO) on
Brazilian Airlines flight
#2120 has changed. The
revised departure time is…
From: NX SC 1223
To: 33 6 78 90 12 34
Envover: Bonjour!
• SMS cannot originate from a
standard number
• Amazon SNS switches
automatically to a ‘pre-approved’
delivery code
Carrier Restriction
France
• Character limit is 157, versus the
160 world standard
• Amazon SNS concatenates to
ensure full delivery
Carrier Restriction
Brazil
• Promotional messages are
prohibited from 9 PM – 9 AM
• Amazon SNS buffers messages
until the promotional messaging
time window commences.
Carrier Restriction
India
From: 225-631
Don’t forget about
special deals this
summer!
• Transactional Messages require
a pre-registered communication
code
• Amazon SNS converts the
message source to a known
registered communication code
Carrier Restriction
India
From: LM-ADIDAS
Thank You. Your order#
123ABC has shipped!

27. Expanded console experience
27

28. Managing text messaging preferences
28

29. Managing opted-out phone numbers
29

30. AWS Device Farm

31. AWS Device Farm
Overview
Native, hybrid, and web app testing on real Android and
iOS devices in the cloud
31

32. Remote Access
Select a device View historical sessionsInteract with the device
32
1 2 3

33. Demo
33

34. Thank you!