IoT Policy rules for publishing directly to rules (basic ingestion)

0

The AWS IoT Core action resources documentation explains how you can formulate policy statements for resource-limiting iot:Publish.

I am wondering: can you use this control access to be able to publish to basic ingestion rules. What I'm looking to do is to allow certain clients to ONLY publish to rules via basic ingestion, perhaps specific rules. Is something like this this okay:

resources: ["arn:aws:iot:*:*:topic/$aws/rules/*"]

profile picture
wz2b
posta 9 mesi fa277 visualizzazioni
1 Risposta
2
Risposta accettata

Hello,

Yes, you can use "resources: ["arn:aws:iot:::topic/$aws/rules/*"]"

According to the below documentation, we can observe below:

Before you use Basic Ingest, verify that your device or application is using a policy that has publish permissions on $aws/rules/. Alternatively, you can specify permission for individual rules with $aws/rules/rule_name/ in the policy.

[+]. https://docs.aws.amazon.com/iot/latest/developerguide/iot-basic-ingest.html#iot-basic-ingest-use

AWS
con risposta 9 mesi fa
profile pictureAWS
ESPERTO
Greg_B
verificato 9 mesi fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande