This article outlines an offline-first architecture for deploying generative AI applications at the edge, particularly in environments with unreliable or no cloud connectivity. It details key architectural decisions, including model customization strategies (fine-tuning, continued pre-training, RAG), hardware constraints, and service integrations using AWS IoT Greengrass and other AWS AI/ML services. The focus is on enabling local AI inference while leveraging the cloud for model development and orchestration.
Read original on AWS Architecture BlogDeploying generative AI to industrial edge environments presents unique architectural challenges, primarily due to unreliable or absent cloud connectivity. An offline-first approach is crucial, where AI inference occurs locally at the edge, while cloud services manage model customization, deployment orchestration, and continuous improvement. This distributed pattern necessitates careful coordination across AI/ML, IoT, and storage services, along with deliberate trade-offs to balance model capabilities, hardware limitations, and operational complexity.
The fundamental decision in an offline-first AI architecture is how to customize a language model to be sufficiently small for edge hardware. This involves working with Small Language Models (SLMs) that fit within the compute and memory constraints (typically GPUs with 16 GB+ VRAM) of edge devices. The chosen customization strategy directly impacts architectural complexity, cost, and data pipeline requirements.
The reference architecture for an edge-deployed generative AI solution, exemplified by a manufacturing use case, adopts the Hybrid (FT + RAG) approach. This balances compact model size with dynamic knowledge retrieval. The architecture is logically divided into cloud-side preparation, deployment orchestration, and edge-side inference.
Edge vs. Cloud Trust Domains
The architecture operates across two distinct trust domains. Cloud services use least-privilege IAM roles, and all cloud-to-edge communication employs mutual TLS via IoT Greengrass device certificates, highlighting the importance of robust security in hybrid cloud-edge deployments.