AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-07-04 · Documentation low

File: wellarchitected/latest/iot-lens/software-and-architecture-cloud.md

Summary

Updated IoT sustainability best practices with revised numbering (IOTSUS02-BP01/BP02), added risk level assessments, and clarified guidance about Basic Ingest/QoS optimizations for energy efficiency

Security assessment

Changes focus on sustainability optimizations (energy efficiency via Basic Ingest and QoS selection) rather than security controls. While Basic Ingest mentions secure data transmission, this is existing functionality rather than new security documentation. The 'risk' references pertain to sustainability impact, not security risks.

Diff

diff --git a/wellarchitected/latest/iot-lens/software-and-architecture-cloud.md b/wellarchitected/latest/iot-lens/software-and-architecture-cloud.md
index 183a35f35..8c49817f9 100644
--- a//wellarchitected/latest/iot-lens/software-and-architecture-cloud.md
+++ b//wellarchitected/latest/iot-lens/software-and-architecture-cloud.md
@@ -3 +3 @@
-[Documentation](/index.html)[AWS Well-Architected](https://aws.amazon.com/architecture/well-architected/)[AWS Well-Architected Framework](abstract-and-introduction.html)
+[Documentation](/index.html)[AWS Well-Architected](https://aws.amazon.com/architecture/well-architected/)[AWS Well-Architected Framework](iot-lens.html)
@@ -5 +5 @@
-Best Practice IOTSUS_2.1 Use the Basic Ingest feature in AWS IoT CoreBest Practice IOTSUS_2.2 Choose an appropriate QoS level
+IOTSUS02-BP01 Use the Basic Ingest feature in AWS IoT CoreIOTSUS02-BP02 Choose an appropriate Quality of Service (QoS) level
@@ -9 +9 @@ Best Practice IOTSUS_2.1 Use the Basic Ingest feature in AWS IoT CoreBest Practi
-IOTSUS 2. How do I use the cloud to minimize my carbon footprint?  
+IOTSUS02: How do you incorporate optimized cloud services in your architecture to minimize your carbon footprint?  
@@ -12 +12 @@ IOTSUS 2. How do I use the cloud to minimize my carbon footprint?
-[Studies by 451 Research](https://sustainability.aboutamazon.com/carbon-reduction-aws.pdf) have shown that AWS' infrastructure is 3.6 times more energy efficient than the median of U.S. enterprise data centers surveyed and up to five times more energy efficient than the average in Europe. 451 Research also found that AWS can lower customers' workload carbon footprints by nearly 80% compared to surveyed enterprise data centers, and up to 96% once AWS is powered with 100% renewable energy by 2025. While this makes it much easier to lower your carbon footprint for workloads in the cloud, it does not reduce the need for optimization of cloud workloads. 
+[Studies by 451 Research](https://sustainability.aboutamazon.com/carbon-reduction-aws.pdf) have shown that AWS' infrastructure is 3.6 times more energy efficient than the median of U.S. enterprise data centers surveyed and up to 5 times more energy efficient than the average in Europe. 451 Research also found that AWS can lower customers' workload carbon footprints by nearly 80% compared to surveyed enterprise data centers, and up to 96% once AWS is powered with 100% renewable energy by 2025. While this makes it much easier to lower your carbon footprint for workloads in the cloud, it does not eliminate the need for optimization of cloud workloads. 
@@ -14 +14 @@ IOTSUS 2. How do I use the cloud to minimize my carbon footprint?
-It is recommended that customers use the AWS [customer carbon footprint tool](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/what-is-ccft.html) to view estimates of the carbon emissions associated with their usage of AWS products and services. This tool provides data visualizations to help customers understand their historical carbon emissions, evaluate emission trends as their use of AWS evolves, approximate the estimated carbon emissions they have avoided by using AWS instead of an on-premises data center, and review forecasted emissions. The forecasted emissions are based on current usage, and show how a customer's carbon footprint will change through its actions as well as those brought about as Amazon moves to use 100% renewable energy [by 2025](https://sustainability.aboutamazon.com/products-services/the-cloud?energyType=true). 
+Use the AWS [customer carbon footprint tool](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/what-is-ccft.html) to view estimates of the carbon emissions associated with their usage of AWS products and services. This tool provides data visualizations to help customers understand their historical carbon emissions, evaluate emission trends as their use of AWS evolves, approximate the estimated carbon emissions they have avoided by using AWS instead of an on-premises data center, and review forecasted emissions. The forecasted emissions are based on current usage and show how a customer's carbon footprint can change through its actions. 
@@ -18 +18 @@ More detailed guidance on sustainability practices in the cloud can be found in
-## Best Practice IOTSUS_2.1 – Use the Basic Ingest feature in AWS IoT Core
+## IOTSUS02-BP01 Use the Basic Ingest feature in AWS IoT Core
@@ -20 +20 @@ More detailed guidance on sustainability practices in the cloud can be found in
-The ingestion layer is where all data coming from disparate devices and data sources is aggregated and made available for cloud application consumption. To ensure that you are using the right ingestion approach to achieve both performance efficiency and sustainability, there are a number of considerations to keep in mind. 
+With the Basic Ingest feature, you can securely send device data to the AWS services supported by AWS IoT rule actions, without incurring messaging costs. Basic Ingest optimizes data flow by removing the publish/subscribe message broker from the ingestion path, making it more cost-effective and resource-efficient. 
@@ -22 +22 @@ The ingestion layer is where all data coming from disparate devices and data sou
-When ingesting data to AWS IoT Core, consider whether to use the [Basic Ingest feature](https://docs.aws.amazon.com/iot/latest/developerguide/iot-basic-ingest.html) or not. With the Basic Ingest feature, you can securely send device data to the AWS services supported by [AWS IoT rule actions](https://docs.aws.amazon.com/iot/latest/developerguide/iot-rule-actions.html), without incurring [messaging costs](https://aws.amazon.com/iot-core/pricing/). Basic Ingest optimizes data flow by removing the publish/subscribe message broker from the ingestion path, making it more cost effective as well as more resource efficient. You can use this approach if your application does not require multiple subscribers for the data being ingested. 
+**Level of risk exposed if this best practice is not established:** Low 
@@ -24 +24 @@ When ingesting data to AWS IoT Core, consider whether to use the [Basic Ingest f
-For all other ingestion mechanisms (such as the Amazon Kinesis family of services), refer to the [AWS IoT Lens](https://docs.aws.amazon.com/wellarchitected/latest/iot-lens/abstract-and-introduction.html) for guidance on which service is appropriate for which use case. At this time, there are no additional sustainability best practices for these services. 
+**Prescriptive guidance**
@@ -26 +26 @@ For all other ingestion mechanisms (such as the Amazon Kinesis family of service
-## Best Practice IOTSUS_2.2 – Choose an appropriate QoS level
+When ingesting data to AWS IoT Core, consider whether to use the Basic Ingest feature or not. Use this approach if your application does not require multiple subscribers for the data being ingested. 
@@ -28 +28,11 @@ For all other ingestion mechanisms (such as the Amazon Kinesis family of service
-Use MQTT when you have IoT devices or other resource-constrained environments that need to communicate efficiently and reliably with a publish-subscribe messaging pattern. MQTT supports different quality of service (QoS) levels for message delivery. Higher QoS levels involve additional network overhead for acknowledgment and retransmission, which can increase power consumption. Consider using lower QoS levels (such as QoS 0) if the reliability of message delivery is not critical for your use case. 
+For ingestion mechanisms other than Basic Ingest (such as the Amazon Kinesis family of services), refer to the AWS IoT Lens for guidance on which service is appropriate for which use case. At this time, there are no additional sustainability best practices for these services. 
+
+## IOTSUS02-BP02 Choose an appropriate Quality of Service (QoS) level
+
+Higher QoS levels involve additional network overhead for acknowledgment and retransmission, which can increase power consumption. 
+
+**Level of risk exposed if this best practice is not established:** Low 
+
+**Prescriptive guidance**
+
+Use MQTT when you have IoT devices or other resource-constrained environments that need to communicate efficiently and reliably with a publish-subscribe messaging pattern. MQTT supports different quality of service (QoS) levels for message delivery. Consider using lower QoS levels (such as QoS 0) if the reliability of message delivery is not critical for your use case to reduce power consumption and network overhead. 
@@ -36 +46 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Software and architecture – Software optimization
+Software and architecture optimization