20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 & Part2

© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
AWS Webinar
https://amzn.to/JPWebinar https://amzn.to/JPArchive
Solutions Architect
2019/04/09
Let’s Dive Deep into AWS
Lambda
[AWS Black Belt Online Seminar]
Part1 & Part2

© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
• 2019 4 1
AWS (http://aws.amazon.com)
• AWS
AWS
•
• AWS does not offer binding price quotes. AWS pricing is publicly available and is subject to
change in accordance with the AWS Customer Agreement available at
http://aws.amazon.com/agreement/. Any pricing information included in this document is provided
only as an estimate of usage charges for AWS services based on certain information that you
have provided. Monthly charges will be based on your actual use of AWS services, and may vary
from the estimates provided.

Who am I ?
Keisuke Nishitani
Manager, Specialist Solutions Architect
Amazon Web Service Japan K.K
@Keisuke69 Keisuke69 Keisuke69 Keisuke69Keisuke69x

AWS Lambda
AWS Lambda
/

Photo credit: Ajith (അജിത്ത്) via Visualhunt / CC BY-SA

Photo credit: Leo Hidalgo (@yompyz) via VisualHunt / CC BY

• OS
•
•
•
•

Undifferentiated Heavy Lifting

Photo credit: kizzzbeth via Visual hunt / CC BY

Developers need …

More efficiency
More scalability
More agility

And…

No more servers

LEVELOFABSTRACTIONComputing

•
•
•
•
•

Virtual Servers
in Datacenters
• HW
•
•
• Elastic
•
•

Virtual Servers
in Datacenters
Virtual Servers
in Datacenters
•
•
•
•
•
• ( )

Virtual Servers
in Datacenters
Virtual Servers
in Datacenters
Serverless
•
•
•
•
•
AWS Lambda
AWS Fargate

/ /
•

•

Lambda

AWS Compute
スケールの単位インスタンスアプリケーション関数
抽象化ハードウェア OS ランタイム
使いドコロ
• OS、ネットワーク、スト
レージのレベルで構成を制御
したい
• 好みのOSを利用したい
• OS以上の全てを自分でコン
トロールしたい
• サーバを自分で構成して実行
したい
• アプリケーションの構成を制
御したい
• スケールを自分でコントロー
ルしたい
• 必要なときだけコードの実行
を行いたい
• インフラの構成・管理を行い
たくない
Amazon EC2 Container Services AWS Lambda

AWS Lambda release history
?
*As of October 2018, does not include region launches
2015 2016 2017 2018

API Gateway S3
Amazon Kinesis
Data Streams SQS
S3
DynamoDB

SECURITY
DEV TOOLS
MONITORING
EVENT SOURCES DOWN STREAMS
AWS Cloud9
AWS SAM
AWS CodeBuild
AWS CodePipeline
AWS CodeDeploy
AWS CodeCommit
AWS SAM CLI
AWS X-Ray
AWS CodeStar
Amazon S3
Amazon Kinesis
Amazon DynamoDB
Amazon SQS
Amazon API Gateway
AWS CloudWatch AWS CloudWatch Logs AWS Config
AWS IAMAWS WAFAmazon Cognito
Amazon SNS
Amazon SES
AWS IoT
AWS AppSync
Amazon Lex
AWS CloudWatch Events
Amazon S3
Amazon DynamoDB
Any AWS Services
External API
AWS Lambda
AWS Step Functions
AWS Amplify

0.0% 10.0% 20.0% 30.0% 40.0% 50.0% 60.0% 70.0% 80.0% 90.0% 100.0%
Google Kubernetes Engine
Google Firebase
Amazon SageMaker
AWS IoT
Amazon Redshift (Spectrum)
Amazon Kinesis Data Firehose
Amazon Fargate
Amazon SQS
Amazon Kinesis Data Streams
AWS Step Functions
Amazon Cognito
Amazon ECS
Amazon Aurora
Amazon DynamoDB
Amazon API Gateway
AWS Lambda

0.0% 5.0% 10.0% 15.0% 20.0% 25.0% 30.0% 35.0% 40.0% 45.0%
インタラクティブモバイル
0.その他
画像データ加⼯処理
外部向けサービスの認証機能
IoT関連領域
チャットボット、Alexaスキル
企業内データの収集・加⼯処理
業務系API、グループ企業間API
イベント駆動の業務間連携
モバイルバックエンド
ログデータ処理、機械学習ELTデータパイプライン
動的Webシステム

AWS Lambda

Lambda
AWS Lambda
•
• 1
•
JSON
• ZIP
• Amazon S3
• S3 ARN

2019 4 1
Python 2.7, 3.6, 3.7
Node.js 6.10, 8.10
.NET Core 1.0(C#), 2.0(C#), 2,1(C#/PowerShell 6.0)
Go 1.x
Java 8
Ruby 2.5

Lambda -
• 64MB 128MB 3008MB
• CPU
•
• Lambda
• 900 15
• AWS IAM
• IAM Lambda AWS

Lambda
TCP/IP UDP/IP
ptrace
TCP 25

AWS Lambda
: Amazon Linux
AMI: amzn-ami-hvm-2017.03.1.20170812-x86_64-gp2
Linux : 4.14.77-70.59.amzn1.x86_64
AWS SDK for JavaScript: 2.290.0
SDK for Python (Boto 3)
• Python 3.6: boto3-1.7.74 botocore-1.10.74
• Python 3.7: boto3-1.9.42 botocore-1.12.42

AWS
• Lambda
3
•
•
• Lambda Lambda
•
• Lambda
•
AWS Lambda

2019 4 1
Amazon S3
Amazon DynamoDB
Amazon Kinesis Data Streams
Amazon Simple Notification Service
Amazon Simple Email Service
Amazon Simple Queue Service
Amazon Cognito
AWS CloudFormation
Amazon CloudWatch Logs
Amazon CloudWatch
AWS CodeCommit
Schedlued Event(Amazon CloudWatch Events )
AWS Config
Amazon Alexa
Amazon Lex
Amazon API Gateway
AWS IoT
Amazon CloudFront
Amazon Kinesis Data Firehose

AWS CLI
• AWS
• InvocationType Event
•
• InvocationType RequestResponse
• Lambda

Lambda
•
• FunctionError
• Limit
URL
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/API_Invoke.html#API_Invok
e_Errors
• AWS
•
• 2
•
• Dead Letter Queue DLQ Amazon SQS
Amazon SNS

Lambda
•
•
• Visibility Timeout
•

VPC
Amazon RDS Amazon Elasticache VPC
VPC Lambda VPC
•
• Availbility Zone (AZ) 1
• AZ IP AZ Lambda
Elastic Network Interface(ENI)
• Lambda
• ENI IP DHCP
• IAM Role ”AWSLambdaVPCAccessExecutionRole”

VPC
• IP
• NAT Amazon VPC NAT
ENI IP
• CloudWatch Logs
•
ENI
Projected peak concurrent executions * (Memory in GB / 3GB)

VPC FAQ
IP
ENI Lambda
IP
VPC
Managed Nat Gateway NAT
IP

VPC FAQ
Lambda
Lambda
AWS Direct Connect VPN
Lambda ENI 10 60
ENI Lambda
ENI Lambda

-
Lambda AWS
• Amazon CloudWatch Logs
• Lambda Lambda
• AWS Identity and Access Management (IAM)
• ”AWS Lambda”
•
Lambda AWS
• Lambda

-
AWSLambdaBasicExecutionRole
• CloudWatch
AWSLambdaKinesisExecutionRole
• Amazon Kinesis
AWSLambdaDynamoDBExecutionRole
• Amazon DynamoDB
AWSLambdaSQSQueueExecutionRole
• Amazon Simple Queue Service (Amazon SQS)
AWSLambdaVPCAccessExecutionRole
• VPC Elastic Network Interface
AWSXrayWriteOnlyAccess
• X-Ray

-
Lambda
•
• AWS
Lambda AWS
• principal AWS ID
IAM

Lambda
1,000
•
(
: 429)
• 15 30
ConcurrentExecutions UnreservedConcurrentExecutions

•
•
• Amazon SQS 5
1 60
•

1s 2s 3s 4s 5s
秒間リクエスト:
10 req/sec
関数の平均実行時間: 3s / exec
同時実行数
= “同時”に実行されているタイミング

-
同時実行数
ストリーム
シャード1
シャード2
シャード3

1 500
• 1000
•
10,000
10,000
• ” ”

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.
• VPC
• 10 30
• Duration

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.
•
• S3 ZIP
• Duration

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.
•
•
• Duration

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.
• /
• Duration

Lambda
1. ENI
2.
3.
4.
5.
6. /
7. • Lambda

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.

Lambda
1. ENI
2.
3.
4.
5.
6. /
7.
1~6

• 1
•
•
•

Lambda
freeze
•
•

•
1000
75GB

128 MB 3008 MB 64 MB
900 seconds (15 )
4 KB
20 KB
5 layers
( ) 6 MB ( )
256 KB ( )
50 MB (zip )
250 MB ( : )
3 MB ( )
( ) 10
/tmp 512 MB
1024
/ 1024

( )
• 100
• $0.20/100
(1 $0.0000002)
( )
• 100ms 100ms
•
) 128MB $ 0.000000208/100ms
• 1GB 1
$0.00001667
• http://qiita.com/Keisuke69/items/e3f79b50b6039175401b

•
• Lambda
• JSON
•
• 2
•
• true
• false callback

• Lambda
• AWS CloudWatch Logs
•
• CloudWatch Logs
•
• Lambda
•
• Lambda

Lambda
•
Amazon S3 Amazon DynamoDB

• Python Node.js
Lambda
Lambda
•
Serverless Application Repository
•
•

Lambda
•
•
•
•
•

Lambda
Node.js
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/programming-model.html
Python
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/python-programming-model.html
Java
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/java-programming-model.html
Go
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/go-programming-model.html
C#
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/dotnet-programming-model.html
PowerShell
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/powershell-programming-model.html
Ruby
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/lambda-ruby.html

AWS Cloud9
•
Lambda

.zip .jar
• zip
•
) Node.js node_modules
zip
•
https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/deployment-package-v2.html
Lambda
•
$ zipinfo test.zip
Archive: test.zip
Zip file size: 473 bytes, number of entries: 2
-r--r--r-- 3.0 unx 0 bx stor 17-Aug-10 09:37 exlib.py
-r--r--r-- 3.0 unx 234 tx defN 17-Aug-10 09:37 index.py
2 files, 234 bytes uncompressed, 163 bytes compressed: 30.3%

1000
• A 100
• B 200
• 700(1000-100-200=700)
DB API
ENI/IP

•
• DB URL 2 Lambda
•
• Node.js process.env
Lambda

AWS Key Management Service AWS KMS
• Lambda KMS
•
•
• Lambda
•
•
• AWS KMS
• kms:Decrypt
•
• Lambda
• Lambda

Lambda
_HANDLER
AWS_REGION Lambda AWS
AWS_EXECUTION_ENV AWS_Lambda_
AWS_Lambda_java8
AWS_LAMBDA_FUNCTION_NAME
AWS_LAMBDA_FUNCTION_MEMORY_SIZE (MB )
AWS_LAMBDA_FUNCTION_VERSION
AWS_LAMBDA_LOG_GROUP_NAME
AWS_LAMBDA_LOG_STREAM_NAME
Amazon CloudWatch Logs
AWS_ACCESS_KEY_ID
AWS_SECRET_ACCESS_KEY
AWS_SESSION_TOKEN
LANG en_US.UTF-8
TZ (UTC) NTP
LAMBDA_TASK_ROOT Lambda
LAMBDA_RUNTIME_DIR
PATH /usr/local/bin:/usr/bin/:/bin:/opt/bin
LD_LIBRARY_PATH /lib64:/usr/lib64:$LAMBDA_RUNTIME_DIR:$LAMBDA_RUNTIME_DIR/lib:$LAMBDA_TASK_
ROOT:$LAMBDA_TASK_ROOT/lib:/opt/lib
NODE_PATH (Node.js) /opt/nodejs/node8/node_modules/:/opt/nodejs/node_modules:$LAMBDA_RUN
TIME_DIR/node_modules
PYTHONPATH (Python) $LAMBDA_RUNTIME_DIR.
GEM_PATH (Ruby) $LAMBDA_TASK_ROOT/vendor/bundle/ruby/2.5.0:/opt/ruby/gems/2.5.0.
AWS_LAMBDA_RUNTIME_API ( ) API

4KB
• [a-zA-Z]
• ([a-zA-Z0-9_] )
• AWS Lambda
) Lang, LD_LIBRARY_PATH

Lambda
•
ARN
• Lambda / publish
• PublishVersion
• $LATEST
•
•
exports.handler = function(event,context) {context.succeed(“bye”);}
exports.handler = function(event,context) {context.succeed(“hi”);}

•
•
•

routing-config 2
%
1. 2
2. 98
3.
4.

:
• FunctionName
• FunctionName:$LATEST
• FunctionName:1
• FunctionName:2
:
• FunctionName:production
• FunctionName:v1_2_3_4

Lambda Layers
Lambda
Lambda Layer
Layer

Lambda Layers
ZIP
Lambda Layer
Layers immutable
5 Layers
Layer
Lambda
Layers
arn:aws:lambda:region:accountId:layer:shared-lib
Lambda
Layers
arn:aws:lambda:region:accountId:layer:shared-lib:2
Lambda
Layers
arn:aws:lambda:region:accountId:layer:shared-lib:3

20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 & Part2

Lambda Layers
/opt
•
•
Layer 1 5
• 250MB
• Layer zip or S3
/opt
• Python – python, python/lib/python3.7/site-packages (site directories)
• Node.js –
nodejs/node_modules, nodejs/node8/node_modules (NODE_PATH)
https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html

Lambda
•
Lambda
•
Lambda AWS
AWS
CLI

DLQ
2
Amazon SQS Amazon SNS
•
• Amazon SQS: SendMessage
• Amazon SNS: Publish

DLQ
DLQ DLQ
DeadLetterErrors
RequestID ID
ErrorCode 3 HTTP
ErrorMessage (1 KB )

Custom Runtimes
Linux Lambda
Runtime API
AWS C++/Rust OSS
https://github.com/awslabs/aws-lambda-cpp-runtime
https://github.com/awslabs/aws-lambda-rust-runtime
PHP/Erlang/Elixir/COBOL
provided

Runtime bootstrap
“bootstrap”
• Layer
bootstrap
• Runtime HTTP API
• context
• Lambda
Layer bootstrap
•
Layer Runtime Runtime
• Runtime
/runtime API
/invocation/next
/init/error /ID/error
/invocation/ID/response
/invocation/ID/error
bootstrap
Process events/headers
Clean up
Initialize and Invoke function
Response/Error handling
Lambda
Function

Custom Runtime
Custom Runtime bootstrap
bootstrap
• Initialization Tasks
• Processing Tasks
Processing Task
Initialization Tasks

Initialization Tasks
• _HANDLER
• .
• LAMBDA_TASK_ROOT
•
• AWS_LAMBDA_RUNTIME_API
• Runtime API
•
• SDK
• API

Processing Tasks
• next invocation API
•
• API Lambda-Runtime-Trace-Id X-Ray
• _X_AMZN_TRACE_ID
• API

Processing Tasks
•
• Invocation response API
• invocation error
•

Example
#!/bin/sh
set -euo pipefail
# Initialization - load function handler
source $LAMBDA_TASK_ROOT/"$(echo $_HANDLER | cut -d. -f1).sh"
# Processing
while true
do
HEADERS="$(mktemp)"
# Get an event
EVENT_DATA=$(curl -sS -LD "$HEADERS" -X GET "http://${AWS_LAMBDA_RUNTIME_API}/2018-06-
01/runtime/invocation/next")
REQUEST_ID=$(grep -Fi Lambda-Runtime-Aws-Request-Id "$HEADERS" | tr -d '[:space:]' | cut -d: -
f2)
# Execute the handler function from the script
RESPONSE=$($(echo "$_HANDLER" | cut -d. -f2) "$EVENT_DATA")
# Send the response
curl -X POST "http://${AWS_LAMBDA_RUNTIME_API}/2018-06-
01/runtime/invocation/$REQUEST_ID/response" -d "$RESPONSE"
done

Runtime Interface
HTTP API
“AWS_LAMBDA_RUNTIME_API”
API
Next Invocation /runtime/invocation/next GET
Invocation Response /runtime/invocation/AwsRequestId/response POST Lambda
Invocation Error /runtime/invocation/AwsRequestId/error POST
JSON
Initialization Error /runtime/init/error POST

Custom Runtime
Lambda
• Custom Runtime
Lambda
AWS Lambda
AWS Lambda Runtime API Runtime
•
•
•

AWS CloudWatch Metrics
• Invocations
• Errors
• Duration
• Throttle
• etc…
AWS X-Ray

Invocations count Lambda
≠
Duration ms Lambda 100ms )
※ Lambda
Errors count Lambda
Throttles count Throttle
Lambda
IteratorAge ms (kinesis/dynamoDB)
Lambda
DeadLetterErrors count DLQ DLQ
ConcurrentExecutions count
UnreservedConcurrentExecutions count

AWS Lambda
AWS Lambda /
•
• S3

IteratorAge Cloudwatch metrics

/
IteratorAge ”Average”
• Lambda
• Kinesis Streams shard
• shard shard
• 200shard
Error metrics
• Lambda
• kinesis streams latest/timestamp
•
Stream Error /

SQS Lambda metrics
5 580
Lambda

Lambda SQS
5 SQS
>
Lambda
• Lambda
• Lambda

Throttle
• Lambda
• CloudWatch All across account Lambda
•
Error metrics
•
• SQS/ Lambda
• 1 x >
Dead Letter Queue
•

AWS X-Ray

AWS Lambda X-Ray
X-Ray SDK ON
Managed policy
Python
• Python 2.7, Python3.6
Node.js
• Node.js 4.3
Java
• Java8
Go
• Go1.7
.NET
• .NET Core 2.0
CLI
--tracing-config

import boto3
import json
import requests
from aws_xray_sdk.core import xray_recorder
from aws_xray_sdk.core import patch_all
patch_all()
def main(event, cotext):
xray_recorder.begin_segment(‘main segment’)
(main処理)
xray_recorder.begin_subsegment(‘sub segment’)
(処理A)
xray_recorder.end_subsegment(‘sub segment’)
xray_recorder.end_segment
return

import boto3
import json
import requests
from aws_xray_sdk.core import xray_recorder
from aws_xray_sdk.core import patch_all
patch_all()
def main(event, cotext):
xray_recorder.begin_segment(‘main segment’)
(main処理)
xray_recorder.begin_subsegment(‘sub segment’)
(処理A)
xray_recorder.end_subsegment(‘sub segment’)
xray_recorder.end_segment
return
python
-botocore, boto3
-requests
-sqlite3
-mysq-connector-python
patch_all patch(’boto3’)

•
•
•
•

X-Ray
Lambda X-Ray
X-Ray
X-Ray 16 MB
3
Lambda X-Ray
• Lambda 128 MB X-Ray
16 MB Lambda 112 MB
• 112 MB
X-Ray

AWS CloudTrail
AWS CloudTrail AWS Lambda AWS
• AWS Lambda API
•
CloudTrail
AddPermission
CreateEventSourceMapping
CreateFunction
DeleteEventSourceMapping
DeleteFunction
GetEventSourceMapping
GetFunction
GetFunctionConfiguration
GetPolicy
ListEventSourceMappings
ListFunctions
RemovePermission
UpdateEventSourceMapping
UpdateFunctionCode
UpdateFunctionConfiguration

exports.handler =
function(event, context) {
console.log('Received event:');
var bucket =
event.Records[0].s3.bucket.name;
var key =
event.Records[0].s3.object.key;
console.log(‘Bucket: ‘+bucket);
console.log(‘Key: ‘+key);
…
CloudWatch Logs
• Lambda
/
• Max Memory Used
• Duration
• Billed Duration
• console.log
•

• 1
• CloudWatch Events – Schedule
• Cron

rate(Value Unit)
•
• Value
• Unit
• 5 => rate(5 minites)
• 1 => rate(1 hour)
• 7 => rate(7 days)
Value Unit

cron(Minutes Hours Day-of-month Month Day-of-week Year)
•
• UTC
•
• 10:00 => cron(0 10 * * ? *)
• 06:00 => cron(0 18 ? * MON-FRI *)
• 8:00 => cron(0 8 1 * ? *)
• 10 => cron(0/10 * ? * MON-FRI *)
• 8:00 5:55 5
=> cron(0/5 8-17 ? * MON-FRI *)

Cron
/ minutes 0/15 15
L " " Day-of-month
Day-of-week
( )
W 5/W 5
5
5
# n 3#2 2 7 3
* Day-of-month
?
- 10-12 10 11 12
, SUN, MON, TUE
/ 5/10 5 15 25 35

Lambda
• AWS Serverless Application Repository
• Lambda
AWS CloudFormation
• AWS
AWS Serverless Application Model (AWS SAM)
•
• AWS CloudFormation
•
• CloudFomation
AWS CLI AWS SAM CLI
•
• AWS CLI
• AWS SAM CLI
5/15
Part3

Photo credit: rolands.lakis via VisualHunt.com / CC BY
Any questions?

© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
AWS Webinar
https://amzn.to/JPWebinar https://amzn.to/JPArchive

20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 & Part2

More Related Content

What's hot (20)

Similar to 20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 & Part2 (20)

More from Amazon Web Services Japan (20)

Recently uploaded (20)

20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 & Part2