AWS re:Postを使用することにより、以下に同意したことになります AWS re:Post 利用規約
AWS re:Postre:Post

Is there a way to authorize GGv2 core devices to interact with AWS services at the Thing Group level ?

0

I understand how attaching policies to the GreengrassV2TokenExchangeRole enables code running on your GG core devices to access AWS services by using the device cert to obtain temporary credentials. The token exchange role is associated with the device in that case. Is there a way to do something similar at the group level so that putting a device in a thing group would give it permission to access particular AWS services and resources ?

トピック
モノのインターネット (IoT)
タグ
AWS IoT GreengrassAWS IoT Core
言語
English
williamrmay
質問済み 2年前318ビュー
1回答
1
承認された回答

Hello,

I'm sorry to say that no, there is no way to assign a role for Greengrass to use at a Thing Group level. The individual things will all need their own permission to assume the role. The permission to assume the role could be stored in one IoT Policy which is then attached to each Thing's certificate; that way at least you don't need to duplicate policies.

AWS
エキスパート
MichaelDombrowski-AWS
回答済み 2年前
  • williamrmay
    2年前

    Thank you. I guess one could emulate this by having one token exchange role per group and specifying the "group role" during the device install.

  • MichaelDombrowski-AWS エキスパート
    2年前

    Yes, if you have thing groups with unique access requirements, then you can have different roles for each. Note that you are limited to 100 IoT Role Aliases per region, so you can only do that with 100 groups.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ