This Guidance lets you use an Amazon CloudFormation template or an AWS Cloud Development Kit (AWS CDK) for scripts, so you can quickly and safely deploy changes and updates to your workloads. By using infrastructure-as-code tools, you can automate deployment and security checks for all infrastructure and software updates. For observability, you can use Amazon CloudWatch, which provides level metrics and personalized dashboards and logs. You can then set up dashboards and alarms to notify you when your environment is not operating as expected. You can even set up automatic workflows to remediate certain states.
Overview
How it works
These technical details feature an architecture diagram to illustrate how to effectively use this solution. The architecture diagram shows the key components and their interactions, providing an overview of the architecture's structure and functionality step-by-step.
Step 1
Well-Architected Pillars
The architecture diagram above is an example of a Solution created with Well-Architected best practices in mind. To be fully Well-Architected, you should follow as many Well-Architected best practices as possible.
Operational Excellence
Security
This Guidance uses AWS IoT Core to securely connect all IoT devices to AWS. The service encrypts all communication and requires all its clients (connected devices, server applications, mobile applications, or human users) to use strong authentication (including X.509 certificates, AWS Identity and Access Management (IAM) credentials, or third-party authentication through Amazon Cognito). AWS IoT Core also offers fine-grained authorization to isolate and secure communication among authenticated clients.
This Guidance also uses Amazon Managed Grafana, which lets you control and restrict incoming traffic that can reach your workspace. It also encrypts data at rest without special configuration or third-party tools and encrypts data in transit using SSL.
Reliability
This Guidance uses AWS Panorama so that devices can run machine learning (ML) models locally while also sending data to the cloud for further processing. This edge ML deployment reduces your dependency on cloud connectivity, improving reliability and reducing downtime risks.
Performance Efficiency
This Guidance uses AWS IoT SiteWise, which efficiently processes a large volume of machine data at scale to help you derive insights faster. Additionally, AWS IoT TwinMaker improves efficiency by accelerating digital twin creation through prebuilt components, templates, and automation.
Cost Optimization
This Guidance helps you optimize data storage costs by using Amazon S3, which provides features like life cycle policies and S3 Intelligent-Tiering to automatically move data to the most cost-effective tiers, such as S3 Standard-Infrequent Access (S3 Standard-IA) and S3 Glacier Flexible Retrieval.
Sustainability
This Guidance reduces the need to connect to the cloud continuously by using AWS IoT Greengrass, which deploys ML models and logic to devices to facilitate autonomous operations locally. This lets devices perform compute, messaging, data caching, syncing, and ML inferencing at the edge, helping you minimize your power usage and reduce your carbon footprint.
Related content
Guidance for Airport Data Management on AWS
This Guidance helps you build data management systems that can both monitor airport operations and enhance the traveler experience.
How digital twins can optimize Travel and Hospitality operations
This blog post explores how travel and hospitality companies can use digital twins to monitor and optimize operations.