Serverless applications are transforming the ways that developers are solving problems by radically increasing productivity and reducing operational friction. In this session, we review the various Azure technologies enabling this trend, including Functions, Logic Apps, Event Grid, and more. Learn what Azure serverless platform can do for you with examples of successful serverless applications

3. Title Code Time Presenters
Event Grid Unplugged - Using events as the fuel
powering your applications
THR2038 Monday, May 7, 4:00-4:20 Bahram Banisadr, Dave Beus, James
Aldous
Build Nodejs APIs using Serverless BRK3703 Tuesday, May 8, 10:30-11:45 Simona Cotin
Serverless in Action BRK2132 Tuesday, May 8, 3:00-4:15 Jeff Hollan
Connect Anything to Everything: Serverless Routing
and Messaging with Event Grid
THR3509 Tuesday, May 8, 4:00-4:20 Jeremy Likness
Identity and secure resource access in App Service
and Azure Functions
THR2004 Tuesday, May 8, 4:30-4:50 Matthew Henderson
Serverless, SPAs, and Scalability BRK3710 Tuesday, May 8, 4:45-5:30 Asim Hussain
Break through the serverless barriers with Durable
Functions
THR2005 Wednesday, May 9, 11:30-11:50 Katy Shimizu
Azure Functions and Microsoft Graph THR3302 Wednesday, May 9, 12:30-12:50 Matthew Henderson
Mobile apps built with Xamarin, using a serverless
Azure Functions back-end
THR2433 Wednesday, May 9, 3:00-3:20 Laurent Bugnion

6. …if cloud computing was transportation
…you can lease a car and
take care of maintenance

7. …you can rent a car
…if cloud computing was transportation
…you can lease a car and
take care of maintenance
…you can rent a car and pay
for having it around even
when you are not driving

8. …you can rent a car
…if cloud computing was transportation
…you can lease a car and
take care of maintenance
…you can rent a car and pay
for having it around even
when you are not driving
…you can use a ride sharing
app pay only for
transportation

9. Why people love Serverless

10. Serverless vs. FaaS
“FaaS”
f(x)
Instant Scale
Serverless Infrastructure
“Serverless Containers”

11. Serverless vs. FaaS
“FaaS”
f(x)
IaaS / PaaS / On Prem

12. Azure Serverless application platform

13. Serverless use cases
IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer

18. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer

21. Ravi Prattipati

22. Cloud
Edge
Devices, Things
Solutions running in Microsoft datacenter
built on Azure services
Lightweight gateway/server
API
Monitoring
Services
Data Storage
Processing, Events, Analytics, Validation
Ingestion
Security
Ability ApplicationMicrosoft

23. • Validation
• Payload routing
• Manage device metadata
synchronizing with device twin
• Manage device graph
• Invoke a command on the device
from cloud
• Send a message to the device from
cloud
• Firmware upgrade

24. • Logic apps
• Event Grid

25. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer

36. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer

37. Classified as Microsoft Confidential
Active contributors: Microsoft, Google, IBM, Oracle, Huawei, VMWare, Iguazio, Red Hat,
Serverless Inc., SAP, Collinson Group, Pivotal

38. Classified as Microsoft Confidential
{
"cloudEventsVersion" : "0.1",
"eventType" : "Microsoft.Storage.BlobCreated",
"eventTypeVersion" : "",
"source" : "/subscriptions/{subscription-id}/resource…”,
"eventID" : "173d9985-401e-0075-2497-de268c06ff25",
"eventTime" : "2018-04-28T02:18:47.1281675Z",
"data" : {
"api": "PutBlockList",
"clientRequestId": "6d79dbfb-0e37-4fc4-981f-…",
…
}
}

39. Classified as Microsoft Confidential

43. Vikas Vennavali
application developer, Cloud Services

44. INVENTORY HUB
AZURE AS A PIECE OF OUR TRANSFORMATIONAL JOURNEY
PaaS Serverless Scaling
Starbucks IHUB solution leverages Azure Container Instances, Azure Container Registry, Event Hub, Service Bus, Cosmos DB,
and Azure Functions to create a scalable and resilient platform on Azure.
AUTOMATION & INFRASTRUCTURE AS CODE
Using ARM templates and CLI with Node.js, the infrastructure builds are automated
ASYNCHRONOUS MESSAGING PATTERN
Using Event Hub to consume data at high velocity and Service Bus for message timers
IMMUTABILITY
Using ACI with ACR and leverage existing TomEE image with new business application code
DATA STORE, DISTRIBUTION AND REPLICATION
Using Cosmos DB for data store, replication and automatic failover
SERVERLESS AND AUTOMATIC SCALING
Using Azure Functions containing domain logic triggered from Event Hub
REPORTING
Using Power BI

45. INVENTORY HUB
AZURE AS A PIECE OF OUR TRANSFORMATIONAL JOURNEY
PaaS Serverless Scaling

46. INVENTORY HUB
AZURE AS A PIECE OF OUR TRANSFORMATIONAL JOURNEY
CHALLENGES
EVENT HUBS
Client time out exceptions
COSMOS DB
Request Units surges
AZURE FUNCTIONS:
Scaling with HTTP triggers

47. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer

54. FaaS Provider
Responsible
for security
“of” the cloud Regions Availability Zones Edge Locations
Compute Storage Database Networking
Operating System + Virtual Machines + Containers
Application
Owner
Responsible for
security “in”
the cloud
Applications (Functions)
Identity & Access Management Cloud Services configuration
Client-Side Data in Cloud Data in Transit

55. Traditional Security
Focuses on protecting
applications by securing the
network and servers
Serverless
The application owner doesn't
have any control over the
infrastructure
Traditional app security solutions are inadequate for
serverless

56. F
1. Event
2. Operation
3. Interaction
4. OutputHTTP/S, File, DB, Stream,
SMS, Email, Queue etc.
Malicious code deployment /
3rd party library
Compromised component
1. Injection attacks
2. Auth. bypass
3. Data compromise
4. Sensitive app secrets
leakage
5. Business logic manipulation
6. DoS
…
https://www.puresec.io/resource-downloadServerless Top 10 Most Common Weaknesses (2018):

59. Controls the perimeter of
each function in order to
prevent malicious input from
entering
Controls the function
behavior in order to ensure
the function behaves as
intended
Analyzes each function to
discover known
vulnerabilities and
misconfigurations
While Being Built When Being Invoked During Execution
PureSec Tesseract GA Launch
Date: July 2018
Visibility, Integrity, Auditing
Static Analysis Serverless Firewall Behavioral Protection

61. https://www.puresec.io/build2018

64. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer
 Python Container Preview
 Azure IoT Edge
 Durable Functions GA

65. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer
 Durable Functions GA
 Durable Functions Node.js Preview

66. IoT and Cloud Edge
Microservices
Single Page Web Applications
Data Integration
Cloud Automation
Citizen Developer
 Logic Apps and Event Grid Integration
 CloudEvents 1st class support

68. Title Code Time Presenters
Event Grid Unplugged - Using events as the fuel
powering your applications
THR2038 Monday, May 7, 4:00-4:20 Bahram Banisadr, Dave Beus, James
Aldous
Build Nodejs APIs using Serverless BRK3703 Tuesday, May 8, 10:30-11:45 Simona Cotin
Serverless in Action BRK2132 Tuesday, May 8, 3:00-4:15 Jeff Hollan
Connect Anything to Everything: Serverless Routing
and Messaging with Event Grid
THR3509 Tuesday, May 8, 4:00-4:20 Jeremy Likness
Identity and secure resource access in App Service
and Azure Functions
THR2004 Tuesday, May 8, 4:30-4:50 Matthew Henderson
Serverless, SPAs, and Scalability BRK3710 Tuesday, May 8, 4:45-5:30 Asim Hussain
Break through the serverless barriers with Durable
Functions
THR2005 Wednesday, May 9, 11:30-11:50 Katy Shimizu
Azure Functions and Microsoft Graph THR3302 Wednesday, May 9, 12:30-12:50 Matthew Henderson
Mobile apps built with Xamarin, using a serverless
Azure Functions back-end
THR2433 Wednesday, May 9, 3:00-3:20 Laurent Bugnion