MMBT5S6 Slides
MMBT5S6 Slides
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
MMBT5S6
Kilian Ruess
SaaS Advisor, AWS
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Buy with Prime
AMAZON REFERENCE CASE
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Buy with Prime
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Buy with Prime
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Buy with Prime architecture from 50,000 ft
Customer-facing
layer Backend services
Button Catalogs
Merchant
APIs Orders
Developer
Payments
tools
…
…
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Buy with Prime architecture from 50,000 ft
Customer-facing
layer Backend services
Button Catalogs
Merchant
Isolation
APIs Orders
Developer
Payments
tools
Merchant 2
…
…
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Operational Excellence
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Operational excellence
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
https://aws.amazon.com/architecture/well-architected/
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
Perform operations
as code
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
Perform operations
as code
Reproducible
Tenants
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
Perform operations
as code
Reproducible Frictionless
Tenants On-Boarding
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
Perform operations
as code
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
1 Establish SaaS identity
Perform operations
3 as code
Authentication Onboarding Tenant
Provision
Token (tenant context) 4 2
(optional)
Tenant
user
Multi-tenant aware Tenant
application stack resources
Metrics/metering Logging
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Tenant On-boarding
CloudFormation Template Perform operations
as code
{
"Parameters": {
"tenantId": {
Merchants "Type": "String",
"Description": "Merchant owner ID"
Sign up }
},
"Resource2": {
"Type": "Amazon::BwP::OrderInstance",
"Properties": {
"TenantId": {"Ref": "tenantId"}
}
},
…
}
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Operational excellence
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
Downtimes
Maintenance windows
across many tenants are
not feasible, updates
need to run without
downtime
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
• Application source
• Operation tool source
• Test source
• Infrastructure as code
• Static assets
• Dependency libraries
• Configurations
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
• Compile
• Unit test
• Static analysis
• Code coverage check
• Code review check
• Store package and artifacts
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
Load balancer
Original version
Original version
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pipeline
Gamma- Prod-
Source Build Alpha Beta Gamma Prod
OneBox OneBox
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
How tenant isolation validation works
IAM Role 1
NotAllowListed AWS Account
Control plane
Matching TenantID Tenant metadata database
IAM Role 3
AllowListed AWS Account
Matching TenantID
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
How tenant isolation validation works
Test Runner
instance
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
How tenant isolation validation works
IAM Role 1
NotAllowListed AWS Account
Control
Tenant plane
metadata
Matching TenantID Tenant metadata database
Test Runner
instance
IAM Role 2
AllowListed AWS Account
Not matching TenantID
Data
Tenant plane
business data
Tenant business database
IAM Role 3
AllowListed AWS Account
Matching TenantID
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
How tenant isolation validation works
IAM Role 1
NotAllowListed AWS Account
Control
Tenant plane
metadata
Matching TenantID Tenant metadata database
IAM Role 3
AllowListed AWS Account
Matching TenantID
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
How tenant isolation validation works
IAM Role 1
NotAllowListed AWS Account
Control
Tenant plane
metadata
Matching TenantID Tenant metadata database
Test Runner
instance
IAM Role 2
AllowListed AWS Account
Not matching TenantID
Data
Tenant plane
business data
Tenant business database
IAM Role 3
AllowListed AWS Account
Matching TenantID
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Real test cases for identity and isolation
Account ID
O X
Tenant ID Tenant ID
O X O X
Create
metadata
Tenant
Read
Update
Delete
O X X
Create
Tenant
Read
data
Update
Delete
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Sample test runner implementation
IAM Role 2
Matching TenantID
https://github.com/amzn/buy-with-prime-automate-tenant-validation
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Updates enable agility and innovation
Make frequent,
small, reversible changes
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Feature toggles
Tenant configuration
Off On
Tenant 2
Off On
Tenant 3
New feature
Off On
Tenant 4
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Feature toggles
Tenant configuration
Off On
Tenant 2
Off On
Tenant 3
New feature
Off On
Tenant 4
https://aws.amazon.com/blogs/mt/how-cyberark-implements-feature-flags-with-aws-appconfig/
https://aws.amazon.com/blogs/apn/simple-and-flexible-saas-entitlement-management-with-launchdarkly/
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Operational excellence
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Continuously improve
Improve Optimize
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Culture of Operational Excellence
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. 41
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Additional Complexity in SaaS Operations
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. https://catalog.workshops.aws/saas-operations/
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
For SaaS providers,
operating the service is the
business
Someone who has been there
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thank you!
Kilian Ruess
kilian-ruess
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
!
Please complete
the session survey
© 2021,
2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.