Let's go on a journey through the world of multi-tenant architectures on AWS using serverless technologies. In this talk, we will uncover the key aspects of multi-tenancy, including security, tenant isolation, and performance. We will learn how to utilise Cognito for authentication, DynamoDB to store millions of tenant-partitioned records and lambda for compute. We will also explore different deployment models and their tradeoffs, and, finally, we will learn how to implement policy-based isolation with IAM to keep our execution context tied to one specific tenant and avoid data leakage. By the end of this talk, you will feel more confident building SaaS applications on AWS with serverless technologies and you will have learned some of the many insights that come from the AWS Well-Architected SaaS Lens.

What you'll learn

• Implement IAM policy-based isolation to scope each Lambda execution context to a single tenant and prevent data leakage
• Evaluate pool, silo, and bridge deployment models - the cost, complexity, and isolation trade-offs of each
• Use Amazon Cognito and DynamoDB together for tenant-partitioned authentication and millions of tenant-scoped records at scale
• Apply AWS Well-Architected SaaS Lens patterns to make defensible, production-ready architectural decisions
• Automate tenant provisioning from the start - the patterns that work at five tenants break at fifty

About the Speaker

Guilherme Dalla Rosa is a seasoned software engineer with extensive industry experience, having contributed to projects across Brazil, Ireland, and the UK. He currently serves as the CTO of MerCloud, a B2B e-commerce platform that streamlines the sales process for companies. In addition to his leadership role at MerCloud, Guilherme is also an AWS Community Builder, where he actively shares his expertise and passion for leveraging technology to help businesses enhance their processes and achieve their goals.