aws iot core device certificate

Question

When using aws iot core, do I need to use a different certificate for each device?
If there are many devices, isn't it difficult and inconvenient to use each certificate for each device?
Is there any good way?
Thank you.

Greg · Answer

Hi. Using a unique certificate is a best practice to limit blast radius to a single device if a device is compromised.

- https://docs.aws.amazon.com/whitepapers/latest/securing-iot-with-aws/provision-iot-devices-and-systems-with-unique-identities-and-credentials.html
- https://docs.aws.amazon.com/wellarchitected/latest/iot-lens/identity-and-access-management-iam.html

AWS has numerous methods of device provisioning that can help you provision devices at scale:

- https://d1.awsstatic.com/whitepapers/device-manufacturing-provisioning.pdf
- https://docs.aws.amazon.com/iot/latest/developerguide/iot-provision.html

Please review that material and we'd be more than happy to answer subsequent questions.

aws iot core device certificate

Add your answer

Relevant content