Resilience in Amazon IoT Core

The Amazon global infrastructure is built around Amazon Web Services Regions and Availability Zones. Amazon Web Services Regions provide multiple physically separated and isolated Availability Zones, which are connected with low-latency, high-throughput, and highly redundant networking. With Availability Zones, you can design and operate applications and databases that automatically fail over between Availability Zones without interruption. Availability Zones are more highly available, fault tolerant, and scalable than traditional single or multiple data center infrastructures.

For more information about Amazon Web Services Regions and Availability Zones, see Amazon Global Infrastructure.

Amazon IoT Core stores information about your devices in the device registry. It also stores CA certificates, device certificates, and device shadow data. In the event of hardware or network failures, this data is automatically replicated across Availability Zones but not across Regions.

Amazon IoT Core publishes MQTT events when the device registry is updated. You can use these messages to back up your registry data and save it somewhere, like a DynamoDB table. You are responsible for saving certificates that Amazon IoT Core creates for you or those you create yourself. Device shadow stores state data about your devices and can be resent when a device comes back online. Amazon IoT Device Advisor stores information about your test suite configuration. This data is automatically replicated in the event of hardware or network failures.

Amazon IoT Core resources are Region-specific and aren't replicated across Amazon Web Services Regions unless you specifically do so.

For information about Security best practices, see Security best practices in Amazon IoT Core.