+{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "iot:Publish", + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/start-next", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/*/update", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/*/get", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/get" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Receive", + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/notify-next", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/start-next/*", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/*/update/*", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/get/*", + "arn:aws:iot:region:account:topic/$aws/things/thingname/jobs/*/get/*" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Subscribe", + "Resource": [ + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/jobs/notify-next", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/jobs/start-next/*", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/jobs/*/update/*", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/jobs/get/*", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/jobs/*/get/*" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Connect", + "Resource": "arn:aws:iot:region:account:client/test-*" + } + ] +} ++ +Replace with the following with the data from your AWS account: +* `
+{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iot:Publish" + ], + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/get", + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/update" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Receive" + ], + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/get/accepted", + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/get/rejected", + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/update/accepted", + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/update/rejected", + "arn:aws:iot:region:account:topic/$aws/things/thingname/shadow/update/delta" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Subscribe" + ], + "Resource": [ + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/shadow/get/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/shadow/get/rejected", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/shadow/update/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/shadow/update/rejected", + "arn:aws:iot:region:account:topicfilter/$aws/things/thingname/shadow/update/delta" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Connect", + "Resource": "arn:aws:iot:region:account:client/test-*" + } + ] +} ++ +Replace with the following with the data from your AWS account: +* `
+{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "iot:Publish", + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/certificates/create/json", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Receive" + ], + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/certificates/create/json/accepted", + "arn:aws:iot:region:account:topic/$aws/certificates/create/json/rejected", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json/accepted", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json/rejected" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Subscribe" + ], + "Resource": [ + "arn:aws:iot:region:account:topicfilter/$aws/certificates/create/json/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/certificates/create/json/rejected", + "arn:aws:iot:region:account:topicfilter/$aws/provisioning-templates/templatename/provision/json/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/provisioning-templates/templatename/provision/json/rejected" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Connect", + "Resource": "arn:aws:iot:region:account:client/test-*" + } + ] +} ++ +Replace with the following with the data from your AWS account: +* `
+{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "iot:Publish", + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/certificates/create-from-csr/json", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Receive" + ], + "Resource": [ + "arn:aws:iot:region:account:topic/$aws/certificates/create-from-csr/json/accepted", + "arn:aws:iot:region:account:topic/$aws/certificates/create-from-csr/json/rejected", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json/accepted", + "arn:aws:iot:region:account:topic/$aws/provisioning-templates/templatename/provision/json/rejected" + ] + }, + { + "Effect": "Allow", + "Action": [ + "iot:Subscribe" + ], + "Resource": [ + "arn:aws:iot:region:account:topicfilter/$aws/certificates/create-from-csr/json/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/certificates/create-from-csr/json/rejected", + "arn:aws:iot:region:account:topicfilter/$aws/provisioning-templates/templatename/provision/json/accepted", + "arn:aws:iot:region:account:topicfilter/$aws/provisioning-templates/templatename/provision/json/rejected" + ] + }, + { + "Effect": "Allow", + "Action": "iot:Connect", + "Resource": "arn:aws:iot:region:account:client/test-*" + } + ] +} ++ +Replace with the following with the data from your AWS account: +* `
+{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "iot:CreateJob", + "Resource": [ + "arn:aws:iot:region:account:job/*", + "arn:aws:iot:region:account:thing/thingname" + ] + }, + { + "Effect": "Allow", + "Action": "iot:DeleteJob", + "Resource": [ + "arn:aws:iot:region:account:job/*", + "arn:aws:iot:region:account:thing/thingname" + ] + } + ] +} ++ +Replace with the following with the data from your AWS account: +* `