APIs are evolving and changing the way developers build. Essential to any sort of application, they are driving our increasingly interactive and integrated software world. In this session we’ll discuss some of the latest releases and new features in the AWS Serverless ecosystem that can help supercharge your APIs at scale as well as discuss architectural patterns, including global multi-region active/active options, deployment tools, implementation concepts, technologies (REST/GraphQL) and services for different use cases.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Developing and Implementing
APIs at Scale, the Serverless Way
Ed Lima – Solutions Architect, AWS
@ednergizer

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• Building your API
• REST APIs and GraphQL APIs on AWS
• Securing your API
• Serverless API Backends with AWS Lambda
• Going Global with Serverless APIs
• Developer Tools
Agenda

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https://www.flickr.com/photos/arbron/7213225316
“Software is Eating the World” – Marc
Andreessen
“APIs are Eating Software” – Dr. Steve Willmott

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Building your API
https://secure.flickr.com/photos/spenceyc/7481166880

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
InternetMobile/Web
apps
Databases/
Data stores
Basic API Technology Stack
Fail Over
Load Balancers
Web/Application Servers
Message Buses
Workers
?API
backend
?API
“server”

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
InternetMobile/Web
apps
AWS
Basic API Technology Stack
?API
backend
?API
“server”
Databases/
Data stores
Auto Scaling
Availability Zones
Fail Over
Load Balancers
Web/Application Servers
Message Buses
Workers

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Managing multiple versions and stages of an API is difficult.
Monitoring third-party developers’ access is time consuming.
Access authorization is a challenge.
Traffic spikes create an operational burden.
Dealing with increased management overhead
API Management Challenges

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Introducing Amazon API Gateway
Create a unified
API front end for
multiple
microservices
Authenticate and
authorize
requests to a
backend
DDoS protection
and throttling
for your backend
Throttle, meter,
and monetize
API usage by
third-party
developers

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
?InternetMobile/Web
apps
AWS
Basic API Technology Stack - REST
API
backend
Databases/
Data stores
API Gateway

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon API Gateway
API Gateway Integrations

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Mobile Apps
Websites
Services
Amazon API Gateway
API Gateway
Cache
Public
Endpoints on
Amazon EC2
Amazon
CloudWatch
Monitoring
All publicly
accessible
endpoints
Lambda
Functions
Endpoints
in VPC
Applications
& Services
in VPC
Any other
AWS service
Fully-managed
CloudFront
Distribution
Edge-OptimizedRegionalPrivate
Customer-managed
CloudFront
Distribution
Applications
& Services
in the same
AWS Region
AWS Direct
Connect
On-premises
API Gateway Integrations
NEW

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Mobile Apps
Websites
Services
Amazon API Gateway
API Gateway
Cache
Amazon
CloudWatch
Monitoring
Applications
& Services
in VPC
Fully-managed
CloudFront
Distribution
Edge-OptimizedRegionalPrivate
Customer-managed
CloudFront
Distribution
Applications
& Services
in the same
AWS Region
Public
Endpoints on
Amazon EC2
All publicly
accessible
endpoints
Lambda
Functions
Endpoints
in VPC
Any other
AWS service
AWS Direct
Connect
On-premises
API Gateway Backend Integrations

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
“A one size fits all database doesn’t fit anyone”
Werner Vogels

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Describe what’s possible with
a type system
What Is GraphQL?
Uniform API across data stores
and APIs
Network optimized
requests and responses
Powerful developer tools Integrated
documentation and
introspection
Query language for your API
and a runtime for fulfilling
queries with existing data

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Managed Serverless GraphQL service
Introducing AWS AppSync
Connect to data
sources in your account
Add data sync, real-time and
offline capabilities for any data
source or API
GraphQL façade for any
AWS service
Conflict detection and
resolution in the cloud
Enterprise security features:
IAM, Cognito, OIDC,
API keys

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
?InternetMobile/Web
apps
AWS
Basic API Technology Stack - GraphQL
API
backend
AppSync
Databases/
Data stores

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AppSync Integrations
Internet
Mobile Apps
Websites
Services
AWS Lambda
functions
Amazon
DynamoDB
Amazon
CloudWatch
Monitoring
AWS AppSync
All publicly HTTP/S
accessible endpoints
Amazon
Elasticsearch
Amazon RDS
Amazon EC2
Any other
AWS service NEW
WebSockets
WebSockets

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Internet
Mobile Apps
Websites
Services
Amazon
CloudWatch
Monitoring
AWS AppSync
AppSync Backend Integrations
AWS Lambda
functions
Amazon
DynamoDB
All publicly HTTP/S
accessible endpoints
Amazon
Elasticsearch
Amazon RDS
Amazon EC2
Any other
AWS service NEW

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Internet
Mobile Apps
Websites
Services
Amazon
CloudWatch
Monitoring
AWS AppSync
AppSync Backend Integrations
AWS Lambda
functions
Amazon
DynamoDB
Amazon
Elasticsearch
Amazon RDS
Amazon EC2
Any other
AWS service
API
Gateway

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
InternetMobile/Web
apps
AWS
Databases/
Data stores
Basic API Serverless Technology Stack - GraphQL
AWS Lambda
functions
AppSync
Amazon
DynamoDB

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Use GraphQL Use REST
When data drives UI
• Structured Data
• Complex Data
• Query-driven
• Real-time/Offline
Client-driven development
Pros: Contract-driven,
Introspection, Relations, Types
Conns: Not as ubiquitous as REST
When you leverage HTTP
• Caching
• Content Types
• Hypermedia (HATEOAS)
For Resources (e.g. Kinesis)
Pros: HTTP Client, Golden Standard,
HTTP/2 Performance gains
Conns: Over fetching/Under fetching
GraphQL or REST?

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Bottom Line:
It depends on the use case and, most importantly…
Good API Design!
GraphQL or REST?

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1. REST and GraphQL are totally different
2. GraphQL isn't a magic bullet, nor is it "better"
3. You can definitely use both at the same time
4. GraphQL is dope if used for the right thing
https://philsturgeon.uk/api/2017/01/24/graphql-vs-rest-overview/
“
”
GraphQL or REST?

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Secure your API
https://www.flickr.com/photos/modernrelics/1093797721/

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Basic Serverless API Technology Stack
Places where we can secure our Application
InternetMobile/Web
apps
AWS
Databases/
Data stores
API Gateway AWS Lambda
functions

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Edge Security
InternetMobile/Web
apps
API Gateway
(Regional Endpoint)
Amazon
CloudFront
AWS WAF
https://aws.amazon.com/blogs/compute/protecting-your-api-using-amazon-api-gateway-and-aws-waf-part-i/
https://aws.amazon.com/blogs/compute/protecting-your-api-using-amazon-api-gateway-and-aws-waf-part-2/

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Edge Security
InternetMobile/Web
apps
API GatewayAWS WAF
NEW

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Several mechanisms for adding AuthN/AuthZ to our API:
• IAM Permissions
• Use IAM policies and AWS credentials to grant access
• Custom Authorizers
• Use Lambda to validate a bearer token (OAuth or
SAML as examples) or request parameters and grant
access
• Cognito User Pools
• Create a completely managed user management system
Amazon API Gateway Security

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS AppSync Security
Several mechanisms for adding AuthN/AuthZ to our API:
• IAM Permissions
• Use IAM policies and AWS credentials to grant access
• Cognito User Pools
• Create a completely managed user management
system
• OpenID Connect (OIDC)
• External OpenID Connect provider

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon
EC2
Amazon Elastic Container
Service (ECS)
Amazon EKS AWS FargateALBE/NLB
Auto Scaling
API Backend - AWS Compute Services
AWS
Lambda

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
InternetMobile/Web
apps
AWS
Databases/
Data stores
Basic API Serverless Technology Stack - REST
API Gateway AWS Lambda
functions

32. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
No servers to provision
or manage
Scales with usage
Never pay for idle Availability and fault
tolerance built in
Serverless means…

33. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Infrastructure
Network
Machine / Instance
Operating System
Application

34. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Infrastructure
Network
Instance
Operating System
Application
AWS

35. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
SERVICES (ANYTHING)
Changes in
data state
Requests to
endpoints
Changes in
resource state
EVENT SOURCE FUNCTION
Node.js
Python
Java
C#
Go
Power Shell
Serverless Applications
NEW

36. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Synchronous (push)
Lambda Execution Model
Asynchronous
(event)
Stream-based
(pull)
Amazon
API Gateway
AWS Lambda
function
Amazon
DynamoDBAmazon
SNS
/order
AWS Lambda
function
Amazon
S3
reqs
Amazon
Kinesis
changes
AWS Lambda
service
function

37. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon S3
Amazon DynamoDB
Amazon Kinesis Data Streams
Amazon Simple Notification Service
Amazon Simple Email Service
Amazon Simple Queue Service
Amazon Cognito
AWS CloudFormation
AWS AppSync
Lambda Event Sources
Amazon CloudWatch Logs
Amazon CloudWatch Events
AWS CodeCommit
Scheduled Events
AWS Config
Amazon Alexa
Amazon Lex
Amazon API Gateway
AWS IoT
Amazon CloudFront
Amazon Kinesis Data Firehose

38. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1. Message inserted
into to a queue
message
Amazon
SQS
Lambda
function
3. Function
removes
message from
queue
2. Lambda polls
queue and
invokes function
• Simple, flexible, fully managed message queuing
service for reliably and continuously exchanging any
volume of messages from anywhere
• Processed in batches
• At least once delivery
• Visibility timeout allows for handling of failures during
processing
Amazon SQS + Lambda NEW

39. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Going Global

40. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Global Active-Active Serverless APIs
https://read.acloud.guru/building-a-serverless-multi-region-active-active-backend-36f28bed4ecf
https://myglobal.api.com

41. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Global Active-Active Serverless APIs
https://read.acloud.guru/build-a-cost-effective-mobile-backend-for-scale-and-security-4c0c143e898c

42. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Where do
you ..
https://secure.flickr.com/photos/stevendepolo/5749192025/

43. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• Declarative templates of your resources
• Manages AWS resources based on dependencies
• Manage with Source Control
AWS CloudFormation

44. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Meet
SAM!

45. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWSTemplateFormatVersion: '2010-09-09’
Transform: AWS::Serverless-2016-10-31
Resources:
HelloWorldFunction:
Type: AWS::Serverless::Function
Properties:
Handler: app.lambda_handler
Runtime: nodejs8.10
Events:
Add:
Type: Api
Properties:
Path: /
Method: get
Environment:
Variables:
TABLE_NAME: !Ref Table
Table:
Type: AWS::Serverless::SimpleTable
SAM Template

46. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWSTemplateFormatVersion: '2010-09-09’
Transform: AWS::Serverless-2016-10-31
Resources:
HelloWorldFunction:
Type: AWS::Serverless::Function
Properties:
Handler: app.lambda_handler
Runtime: nodejs8.10
Events:
Add:
Type: Api
Properties:
Path: /
Method: get
Environment:
Variables:
TABLE_NAME: !Ref Table
Table:
Type: AWS::Serverless::SimpleTable
SAM Template
Lambda Function

47. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
SAM Template
API Gateway API
AWSTemplateFormatVersion: '2010-09-09’
Transform: AWS::Serverless-2016-10-31
Resources:
HelloWorldFunction:
Type: AWS::Serverless::Function
Properties:
Handler: app.lambda_handler
Runtime: nodejs8.10
Events:
Add:
Type: Api
Properties:
Path: /
Method: get
Environment:
Variables:
TABLE_NAME: !Ref Table
Table:
Type: AWS::Serverless::SimpleTable

48. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
SAM Template
DynamoDB Table
AWSTemplateFormatVersion: '2010-09-09’
Transform: AWS::Serverless-2016-10-31
Resources:
HelloWorldFunction:
Type: AWS::Serverless::Function
Properties:
Handler: app.lambda_handler
Runtime: nodejs8.10
Events:
Add:
Type: Api
Properties:
Path: /
Method: get
Environment:
Variables:
TABLE_NAME: !Ref Table
Table:
Type: AWS::Serverless::SimpleTable

49. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• Package
• Creates a deployment package (.zip file)
• Uploads deployment package to an Amazon S3 Bucket
• Adds a CodeUri property with S3 URI
• Deploy
• Calls CloudFormation ‘CreateChangeSet’ API
• Calls CloudFormation ‘ExecuteChangeSet’ API
SAM Commands: Easier Deployment

50. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Transformed Template

51. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Amplify
CLI

52. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
APIGW
Lambda
DynamoDB
Amazon
DynamoDB
API Gateway AWS Lambda

53. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

54. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GraphQL Transformer
type Post {
id: ID!
content: String
description: String
ups: Int
downs: Int
}
NEW

55. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GraphQL Transformer
Amazon DynamoDB
type Post
@model {
id: ID!
content: String
description: String
ups: Int
downs: Int
}
createPost
readPost
updatePost
deletePost
AWS AppSync

56. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GraphQL Transformer
Amazon DynamoDB
type Post
@model
@auth(rules:
[{allow: owner}]){
id: ID!
content: String
description: String
ups: Int
downs: Int
}
Amazon
Cognito
User Pools
mutations
queries
createPost
readPost
updatePost
deletePost
AWS AppSync

57. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GraphQL Transformer
Amazon DynamoDB
type Post
@model
@auth(rules:
[{allow: owner}])
@searchable{
id: ID!
content: String
description: String
ups: Int
downs: Int
}
Amazon Elasticsearch
searchPosts
Amazon
Cognito
User Pools
mutations
queries
createPost
readPost
updatePost
deletePost
AWS AppSync
https://medium.com/open-graphql/create-a-multiuser-graphql-crud-l-app-in-10-minutes-with-the-new-aws-amplify-cli-and-in-a-few-73aef3d49545

58. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Local Development
SAM CLI (Node.js, Java, Python, Go, .NET Core)
Amplify CLI (Node.js)

59. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• What’s your API strategy?
• Technology – Best tool for the job!
• Scalability
• Availability
• Global Reach
• Security
• Developer Tools and Community
• Time to Market
• No Servers!
Takeaways

60. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank you!
https://aws.amazon.com/serverless/
https://aws.amazon.com/api-gateway/
https://aws.amazon.com/appsync/
https://aws-amplify.github.io/

61. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Enablement Training
2 Day Workshop
Checkpoints
Account Manager & Solution Architect,
Account Plan, Opportunity Review
ISV Deliverables
Multi-tenanted Architecture
2 x AWS Professional Certifications
AWS Deliverables
Sandbox Credits ($20k), Summit or
re:Invent sponsorship, This is My
Architecture & Solution Space listing
SaaS
Enablement Training
2 Day Workshop
Checkpoints
Monthly Office Hours, Deep Drive
Architecture sessions & Roadmap
Sharing, Opportunity Review
ISV Deliverables
Scalable Self Healing Architecture
2 x AWS Associate & 1 DevOps
Certifications
AWS Deliverables
Sandbox Credits ($10k), GTM Plan, MDF
($20k) & Partner Connections
Modernize
Enablement Training
1 Day Workshop
Checkpoints
Virtual Fortnightly Office Hours
ISV Deliverables
Replatformed High Availability
Architecture (QuickStart or Marketplace
Listing), Technical Essentials
AWS Deliverables
Sandbox Credits ($10k), Well Architected
Review, Demo Day
Timeframe: 3 Months
Migrate
Timeframe: 6 Months
Timeframe: 1 Year
AWS TechShift Accelerator
Sydney 5th February 2019
Melbourne 7th February 2019
Sydney 14-15th May 2019
Melbourne 16-17th May 2019
Register Your Interest: https://aws.amazon.com/events/techshift/accelerator/

62. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GET TRAINED AND CERTIFIED ON AWS
Benefits to APN Partners:
• Free Digital Training, including AWS Cloud
Practitioner Essentials
• Online Accreditation Training courses to
learn at your own pace
• ILT and vILT sessions of our Solutions
Training for Partners (STP) courses
• Discounted Classroom Training for APN
Partners
• AWS Credits available when achieving AWS
Certification (all Partner Tiers)
Next steps:
1. Enroll now! aws.training
2. Talk to your Account Manager or Partner Development team (aws-anz-pdr@amazon.com) for more
details!