This document provides an overview of AWS IoT, a service that allows devices to securely connect and interact with cloud applications and other devices. It discusses how AWS IoT provides a complete platform for connected devices with SDKs, authentication/authorization, a rules engine, device shadows and registry. It also highlights how AWS IoT supports MQTT and HTTP protocols, allows devices to securely connect and exchange messages, and integrates with other AWS services and third-party services. The document concludes with information on getting started with AWS IoT device SDKs.

1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Interfacing with the Physical World
Introduction AWS IoT
Clayton Brown
Solution Architect Amazon Web
Services
Technical 101

2. Things Are Becoming Connected
Now
Not too long from now
Soon After
Source: Pretty much everyone

3. Healthcare and Life Sciences Municipal Infrastructure Smart Home Retail
Manufacturing, Logistics & Supply
Chain
Agriculture Education Automotive
IOT is focus for innovation in many industries

4. Hello
World!

5. State of Acceleration / Growth
Invention Refinement Traction

6. FPGAs, Microcontroller & Microprocessor Kits

7. MEMS – Sensors & Actuators

8. Hello
Again!

9. Internet of Things

12. AWS IoT
“Securely connect one or one billion devices to AWS,
so they can interact with applications and other devices”
AWS IoT

13. AWS IoT Makes Things Smarter
“A 10 year old product can do things that hadn’t been
invented 10 years ago. Most importantly, going forward,
people will expect your product to improve, and if it isn’t
being updated and getting better, you’re literally being left
behind.”

15. AWS IoT is a Complete Platform for Connected Devices
Many SDKs
& Tools
Alternate
Protocols
Scalability
&
Noise/Signal
Security &
Management
Integration with Cloud
and Mobile Apps and
Analytics

16. AWS IoT
DEVICE SDK
Set of client libraries to
connect, authenticate and
exchange messages
DEVICE GATEWAY
Communicate with devices via
MQTT and HTTP
AUTHENTICATION
AUTHORISATION
Secure with mutual
authentication and encryption
RULES ENGINE
Transform messages
based on rules and
route to AWS Services
AWS Services
-­ -­ -­ -­ -­
3P Services
DEVICE SHADOW
Persistent thing state
during intermittent
connections
APPLICATIONS
AWS IoT API
DEVICE REGISTRY
Identity and Management of
your things

17. AWS IoT Message Broker
DEVICE GATEWAY
Communicate with devices via
MQTT and HTTP

18. AWS IoT Device Gateway
Standard Protocol Support (no lock-­in)
Millions of devices and apps can connect
over any protocol starting with MQTT and
HTTP 1.1 incl WebSockets
Powerful Pub/Sub Broker with Long-­
lived bi-­directional messages
Clients (Devices and Apps) can receive
commands and control signals from the
cloud. CDSUP
Secure by Default
Connect securely via X509 Certs and TLS
1.2 Client Mutual Auth
Topic Based
Architecture
(lights/thing-­2/color)
Highly Scalable
Device Gateway

19. MQTT
MQTT vs HTTPS:
• 93x faster throughput
• 11.89x less battery to send
• 170.9x less battery to receive
• 50% less power to keep connected
• 8x less network overhead
Source:
http://stephendnicholas.com/archives/1217
• OASIS standard protocol (v3.1.1)
• Lightweight, pub/sub transport protocol
with QoS that is useful for connected
devices
• MQTT is used on oil rigs, connected
trucks, and many more sensitive and
resource-­sensitive scenarios.
• Customers have needed to build,
maintain and scale a broker to use
MQTT with cloud applications

20. AWS IoT Message Broker : Managed Service
Highly Scalable
Device Gateway
Connect millions of
devices sending
billions of messages
Subscribers
Publishers

21. AWS IoT Security: Authentication and Authorisation
AUTHENTICATION
Secure with mutual
authentication and encryption
AUTHENTICATION
AUTHORISATION
Secure with mutual
authentication and encryption

22. One Service, Two Protocols
MQTT + Mutual Auth TLS AWS Auth + HTTPS
Server Auth TLS + Cert (X.509) TLS + Cert (X.509)
Client Auth TLS + Cert (X.509) AWS API Keys (SigV4)
Confidentiality TLS TLS
Protocol MQTT HTTP
Identification AWS ARNs AWS ARNs
Authorization AWS Policy AWS Policy

23. Mutual Auth TLS

24. Provisioning and Security
Secure Communications with Things
-­ Single API call to CreateKeysAndCertificate
-­ Client Generated CreateCertificateFromCSR(CSR)
Fine-­grained Authorisation for:
Thing Management
Pub/Sub Data Access
AWS Service Access
IAM ASPEN Policies
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["iot:Publish"],
"Resource":
["arn:aws:iot:us-east-
1:123456972007:topic/foo"]
},
{
"Effect": "Allow",
"Action": ["iot:Subscribe"],
"Resource":
["arn:aws:iot:us-east-
1:123456972007:topicfilter/foo/bar/*"]
}]}

25. AWS IoT Rules Engine
RULES ENGINE
Transform messages
based on rules and
route to AWS Services

26. Simple & Familiar Syntax
-­ SQL Statement to define topic filter
-­ Optional WHERE clause
-­ Advanced JSON support
Functions improve signal: noise
-­ String manipulation (regex support)
-­ Mathematical operations
-­ Context based helper functions
-­ Crypto support
-­ UUID, Timestamp, rand, etc.
AWS IoT Rules Engine Basics
SELECT * FROM ‘things/thing-­2/color’
WHERE color = ‘red’

27. AWS IoT Rules Engine’s Flexibility
”sql" : "SELECT *
FROM 'iot/tempSensors/#'
WHERE temp > 50",
"actions" : [
{
"dynamoDB" : {
"rangeKeyField" : "timestamp",
"rangeKeyValue" : "${timestamp()}",
"hashKeyField" : "key",
"tableName" : "HighTempTable",
"roleArn" : "arn:aws:iam::yourId…
"hashKeyValue" : "${topic(3)}"
}
}],
"description" : "Rule to save sensor
data when temperature
is about 50”

28. AWS IoT Rules Engine
Complex Evaluations
Respond to the fleet, not just a single unit. Dozens of functions() available
Multiple / Simultaneous Actions
Sometimes a situation requires you to take many actions

29. AWS IoT Rules Engine Actions
RULES ENGINE
Transform messages
based on rules and
route to AWS Services
AWS Services
-­ -­ -­ -­ -­
3P Services
AWS Services
-­ -­ -­ -­ -­
3P Services

30. 1. AWS Services
(Direct Integration)
Rules Engine
Actions
AWS IoT Rules Engine
AWS
Lambda
Amazon
SNS
Amazon
SQS
Amazon
S3
Amazon
Kinesis
Amazon
DynamoDB
Rules Engine connects AWS
IoT to External Endpoints and
AWS Services.
Amazon RDS
Amazon
Redshift
Amazon Glacier
Amazon
EC2
2. Rest of AWS
(via Amazon Kinesis, AWS
Lambda, Amazon S3, and
more)
3. External Endpoints
(via Lambda and SNS)

31. AWS IoT Registry & Device Shadows
DEVICE SHADOW
Persistent thing state
during intermittent
connections
APPLICATIONS
DEVICE REGISTRY
Identity and Management of
your things

32. AWS IoT Device Shadow
Shadow

33. AWS IoT Shadow Flow
Shadow
Device SDK
1. Device Publishes Current State
2. Persist JSON Data Store
3. App requests device’s current state
4. App requests change the state
5. Device Shadow sync’s
updated state
6. Device Publishes Current State
7. Device Shadow confirms state change
AWS IoT

34. AWS IoT Device Shadow
{
"state" : {
“desired" : {
"lights": { "color": "RED" },
"engine" : "ON"
},
"reported" : {
"lights" : { "color": "GREEN" },
"engine" : "ON"
},
"delta" : {
"lights" : { "color": "RED" }
} },
"version" : 10
}
Thing
Report its current state to one or multiple shadows
Retrieve its desired state from shadow
Mobile App
Set the desired state of a device
Get the last reported state of the device
Delete the shadow
Shadow
Shadow reports delta, desired and reported
states along with metadata and version

35. AWS IoT Device Shadow Topics (MQTT)
Thing SDK (C-­SDK, JS-­SDK)
makes it easy for you build shadow
functionality into your device so it
can automatically synchronise the
state with the device.
AWS IoT Thing Shadow
UPDATE: $aws/things/{thingName}/shadow/update
DELTA: $aws/things/{thingName}/shadow/update/delta
GET: $aws/things/{thingName}/shadow/get
DELETE: $aws/things/{thingName}/shadow/delete
Sensor Reported Desired Delta
LED1 RED YELLOW
LED1 =
Yellow
TEMP = 60F
ACCEL X=1,Y=5,Z=4 X=1,Y=5,Z=4
TEMP 83F 60F

36. Demo

37. AWS IoT
DEVICE SDK
Set of client libraries to
connect, authenticate and
exchange messages
DEVICE GATEWAY
Communicate with devices via
MQTT and HTTP
AUTHENTICATION
AUTHORIZATION
Secure with mutual
authentication and encryption
RULES ENGINE
Transform messages
based on rules and
route to AWS Services
AWS Services
-­ -­ -­ -­ -­
3P Services
DEVICE SHADOW
Persistent thing state
during intermittent
connections
APPLICATIONS
AWS IoT API
DEVICE REGISTRY
Identity and Management of
your things

38. Get Started with AWS IoT Device SDK
C-­SDK
(Ideal for embedded
OS)
JS-­SDK
(Ideal for Embedded
Linux Platforms)
Arduino Library
(Arduino Yun)
Mobile SDK
(Android and iOS)

39. Official IoT Starter Kits with SDKs on a Variety of Platforms
Broadcom WICED
BCM4343W
On Threadx/Netx
Marvell
EZConnect
MW302
On FreeRTOS
Renasas RX63N
On Micrium OS
TI CC3200
On TI-­RTOS
Microchip WCM
PIC32 Platform
Intel Edison
on Yocto Linux
Mediatek
LinkOne
on Linkit OS
Dragonboard
410c on
Ubuntu
Seeeduino
Arduino on
openWRT
Beaglebone
Green on
Debian

40. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Johannes Lehmann, Software Engineering Lead
April 2016
Customer Story

41. Who we are
Ø Organic Response Sensor Nodes deliver the world’s first autonomous
lighting control
Ø Based in Melbourne
Ø Have delivered a number of major projects
Ø Have partnered with some of the world’s leading lighting
manufacturers

42. Building the Lighting Control

43. The Lighting Control Challenge
Ø Buildings use 60% of the world's generated electricity with a total
annual cost of $760 Billion
Ø Lighting alone consumes 19% of total global electricity production,
with a total annual cost of $240 Billion
Challenge: Deliver the world’s best lighting control system

44. Taxonomy of Lighting Control Technologies
Ø Current Status Quo: Copper, Wired, Addressable
Ø Other emerging systems: Wireless Addressable
Ø Organic Response: Autonomous
Ø Each light fitting has a Sensor Node integrated in the factory

45. The Concept
Ø Completely Plug & Play installation
Ø Range limited signals are propagated via IR
Ø Configuration via smartphone app

46. Getting Started
Ø Danny (inventor) contacted university friend in the UK Nov ‘10
Ø Came up with schematic together, tested and wrote first FW on
Veroboards and solderless breadboards
Ø First PCB sent to UK from Australia in Jul ‘11
Ø Changed to bigger microprocessors a couple of times
First commercial prototype
(50 Sensor Nodes) in April ‘12

47. Does it work?
Case study by Mirvac Developments and Australia Gas
Limited (AGL) found 46% energy savings over networked
control system
ENERGY SAVINGS CONTRIBUTIONS
0
10
20
30
40
Existing Wireless
Addressable
Organic
Response
Cost $/sqm
INSTALL 50% CHEAPER

48. The Bigger Picture: Internet of Things

49. The Internet of Things for Public Buildings
Ø Google, Apple, Nest, LifX are focused on home automation. A
massive untapped market exists in public buildings.
Ø Who pays for the deployment of the sensors in commercial,
healthcare, education, car parks?
Ø If you deliver a sensor that pays for itself with energy savings can
you get a sensor into every light?

50. IoT Value Propositions for Smart Lighting

51. Wireless Connectivity
Ø The first challenge: Connectivity
Ø IR too limiting
Ø WiFi too expensive and power hungry
Ø Bluetooth Smart Mesh

52. Handling the Data
Imagine a site with 10k nodes that see occupancy every two minutes –
that’s 7.2m data points per site per day!
Ø How to ingest, store and query the data?
Ø Many IoT platforms are out, because:
Ø Their pricing model does not scale to our number of devices
Ø They use traditional Big Data middleware that doesn’t perform well
for smaller (per-­site) queries
Ø They attempt to solve too big a piece of the puzzle in a way that
doesn’t agree with our requirements

53. AWS to the Rescue
AWS provides flexible building blocks that allow us to build the
system that we want to build without technology lock-­in or
unnecessary overhead.
AWS IoTGateway
Sensor Nodes
?

54. Other Pieces of the Puzzle
AWS IoT
Spark Streaming on
EMR
EC2
RDS
Time-­Series
Datastore

55. Key AWS Services We Use
Ø IoT – Interface with Gateways
Ø EMR – Ingestion into datastore
Ø Elastic Beanstalk – Managing deployment
Ø RDS – Storing structured data
Ø ElastiCache – Caching sessions in Redis
Ø S3 – Storing building-­specific files
Ø Lambda – Triggering periodic events
Ø Code Deploy – Upgrading Spark deployment

56. The Story so Far
Ø Most queries run in under 50ms
Ø Live views of the data with minimal latency
Ø Queries by tags, which can be changed at any time
Ø Deployed across multiple Availability Zones
Ø Flexibility of being able to deploy in any region and create separate
deployments for individual customers

57. Come talk to us
• …if you are interested in working for Organic Response
• …if you are interested in having an Organic Response installation
• Commercial Office?
• Healthcare?
• Education?
• …if you are interested in technical collaboration
• Are you providing services using beacons?
• Are you an IoT platform / service we could further leverage?

59. AWS IoT Recap
DEVICE SDK
Set of client libraries to
connect, authenticate and
exchange messages
DEVICE GATEWAY
Communicate with devices via
MQTT and HTTP
AUTHENTICATION
AUTHORIZATION
Secure with mutual
authentication and encryption
RULES ENGINE
Transform messages
based on rules and
route to AWS Services
AWS Services
-­ -­ -­ -­ -­
3P Services
DEVICE SHADOW
Persistent thing state
during intermittent
connections
APPLICATIONS
AWS IoT API
DEVICE REGISTRY
Identity and Management of
your things

60. Simple Pay as you go and Predictable Pricing
• Pay as you go. No minimum fees
• $5 per million messages published to, or delivered
in US East (N. Virginia), US West (Oregon), EU
(Ireland) $8 in Asia Pacific (Tokyo)
AWS IoT
Free Tier
250,000 Messages Per Month Free for first 12
Months

61. Pricing Example
100 sensors * 30 days
* 24 hours * 60
minutes =
4.38 million messages
1 meter * 100 readings * 30
days * 24 hours * 60
minutes =
4.38 million messages
100 Sensors:
Publishing 1x/minute
DynamoDB Table: Receives all Sensor Data
Metering Unit: Receives all Sensor Data
1 table * 100 readings * 30
days * 24 hours * 60
minutes =
4.38 million messages
4.38 million publishes from sensors: 4.38 * $5 = $21.90
4.38 million deliveries to a metering unit: 4.38 * $5 = $21.90
4.38 million deliveries to DynamoDB: $0
AWS IoT

62. AWS Training & Certification
Intro Videos & Labs
Free videos and labs to
help you learn to work
with 30+ AWS services
– in minutes!
Training Classes
In-­person and online
courses to build
technical skills –
taught by accredited
AWS instructors
Online Labs
Practice working with
AWS services in live
environment –
Learn how related
services work
together
AWS Certification
Validate technical
skills and expertise –
identify qualified IT
talent or show you
are AWS cloud ready
Learn more: aws.amazon.com/training

63. Your Training Next Steps:
ü Visit the AWS Training & Certification pod to discuss your
training plan & AWS Summit training offer
ü Register & attend AWS instructor led training
ü Get Certified
AWS Certified? Visit the AWS Summit Certification Lounge to pick up your swag
Learn more: aws.amazon.com/training

64. Thank you