Internet of Things (IoT) devices are everywhere empowering customers to connect with devices, apps, and information instantly. A top of mind concern with the increasing use of IoT is the security of the components and connections comprising IoT. In this talk, you will learn about the prevailing security concerns with IoT, best practices to employ when building your IoT security strategy along with ‘what and how’ AWS services enable IoT security (including architectural examples) to support your IoT security goals. Level: 200 Speakers: Min Hyun - Head, Strategic Policy Affairs, AWS Security Momena Cheema - Cloud Security Strategist, AWS Security

1. October 22, 2018
Min Hyun & Momena Cheema
Global Affairs
AWS Security Assurance
Internet of Things:
Functions & Security

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Services
Intelligence
Insights & Logic → Action
Things
Sense & Act
Cloud
Storage & Compute

3. Predictive
maintenance
Wellness &
health solutions
Connected buildings
& city systems
Maintain
device fleets
Monitor energy
efficiency
Safeguard manufacturing
facilities
What customers are doing with AWS IoT
IoT payment &
connected commerce
Remote patient
monitor

4. Revenue growth
IoT data drives business growth
Operational efficiency
IoT data decreases OpEx
Business outcomes with IoT
New services &
business models
Products that get
better with time
Better relationship
with customers
Increased
efficiency
Intelligent
decision making
Data driven
discipline

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IoT sounds kind
of awesome.
What are some
AWS IoT basics?

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Architecture
a:FreeRTOS
a:FreeRTOS
Intelligence
Insights & Logic → Action
AWS Greengrass
Endpoints
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
Gateway
Things
Sense & Act
Cloud
Storage & Compute
Secure local
triggers, actions,
and data sync
Secure device
connectivity
and messaging
AWS
IoT Core
AWS IoT Device
Management
AWS IoT Device
Defender

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
That’s a lot of data
IoT is storing and
generating… How
do I use AWS
services to connect
my devices
securely?

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
To securely connect devices
to the AWS cloud and
other devices at scale
To fully integrate with
other AWS service to reason
on top of the data
(Analytics, Databases, AI, etc.)
To route, process, and
act upon data from
connected devices
Secure Device Connectivity and Messaging
AWS IoT Core
AWS IoT Core is a managed service that lets connected devices easily
and securely interact with cloud applications and other devices.
To enable applications to
interact with devices even
when they are offline

9. Secure Device Connectivity and Messaging
AWS IoT Core
Device
Gateway
Rules
Engine
Message
Broker
Device
Shadow
RegistryIdentity
Service

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Greengrass extends AWS IoT onto your devices, so that they can act
locally on the data they generate, while still taking advantage of the cloud.
Extend AWS IoT to the Edge
AWS Greengrass
Edge Cloud
Law of Economics
Law of Physics
Law of the Land

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Extend AWS IoT to the Edge
AWS Greengrass
Data and
State Sync
Security Over the
Air Updates
Protocol
Adapters
Local
Device Shadows
Local
Actions
Lambda
Functions
Local
Messages
and Triggers
Local
Message Broker
AWS-grade
security
Easily Update
Greengrass Core
Machine
Learning
Inference
Local Execution
of ML Models
Local
Resource
Access
Lambdas Interact
With Peripherals
Easy Integrations
With Local
Protocols
ʥ
A

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Local Connectivity
Libraries
Cloud Connectivity
Libraries
Security
Connectivity
Libraries
OTA Beta &
Code Signing
Based on FreeRTOS kernel
AWS Greengrass AWS IoT Core
IoT Microcontroller OS
Amazon FreeRTOS

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Fast device
onboarding at scale
Real-time fleet
indexing and search
Monitoring and
updating devices
AWS IoT Device Management
Device Management Service
AWS IoT Device Management helps you onboard, organize, monitor,
and remotely manage your growing number of connected devices.

14. Batch Fleet
Provisioning
Real-time
Fleet Index & Search
Fine Grained
Device Logging
& Monitoring
Over the
Air Updates
Maintain Fleet Health
AWS IoT Device Management

15. Okay, got it. AWS
addresses lots of
IoT specific use
cases. But I
really, really,
really need to
monitor and
audit this stuff.

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Audit Device
Configurations
Monitor Device
Behavior
Generate
Alerts
Patch Security
Vulnerabilities
AWS IoT Device Defender
Keep Your Fleet Secure
Identify
Anomalies

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Audit device
configurations, define and
monitor device behavior
Identify drifts in security
settings and detect device
anomalies
Generate alerts Patch security
vulnerabilities
AWS IoT Device Defender
Keep Your Fleet Secure
AWS IoT Device Defender is a fully managed IoT security service that
enables you to secure your fleet of connected devices on an ongoing basis.

18. Easily analyze IoT data
AWS IoT Analytics
Channels DatasetsPipelines Data Stores Jupyter Notebooks
& Templates
AWS IoT Analytics is a service that processes, enriches, stores, analyzes,
and visualizes IoT data for manufacturers and enterprises.

19. Sense & Act
Things
Secure device
connectivity
and messaging
AWS IoT Core
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT Device
Defender
GatewayEndpoints
AWS Greengrass
AWS IoT 1-Click
AWS IoT
Analytics
Amazon
FreeRTOS
Storage & Compute & Learn
Cloud
Secure local
triggers, actions,
and data sync
Intelligence
Insights & Logic → Action
AWS IoT Services Suite