Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS ioT fleet provisioing - Coggle Diagram

- - - - aws iam attach-role-policy --role-name GreengrassFleetProvisioningRole --policy-arn arn:aws:iam::aws:policy/service-role/AWSIoTThingsRegistration
  - - - "Effect": "Allow",
        "Principal": {
        "Service": "credentials.iot.amazonaws.com"
        },
        "Action": "sts:AssumeRole"
    - - aws iam create-policy --policy-name GreengrassV2TokenExchangeRoleAccess --policy-document file://device-role-access-policy.json
      - aws iam attach-role-policy --role-name GreengrassV2TokenExchangeRole --policy-arn arn:aws:iam::123456789012:policy/GreengrassV2TokenExchangeRoleAccess
      - "Action"
        
        "iot:DescribeCertificate",
        
        "logs:CreateLogGroup",
        
        "logs:CreateLogStream",
        
        "logs:PutLogEvents",
        
        "logs:DescribeLogStreams",
        
        "s3:GetBucketLocation"
    - - aws iot create-role-alias --role-alias GreengrassCoreTokenExchangeRoleAlias --role-arn arn:aws:iam::123456789012:role/GreengrassV2TokenExchangeRole
- - - - \"iot:Publish\",
      - \"iot:Subscribe\",
      - \"iot:Receive\",
      - \"iot:Connect\",
      - \"greengrass:*\"
- - - - --template-name GreengrassFleetProvisioningTemplate \
      - --description "A provisioning template for Greengrass core devices." \
      - --provisioning-role-arn "arn:aws:iam::123456789012:role/GreengrassFleetProvisioningRole" \
      - --template-body file://greengrass-fleet-provisioning-template.json \
      - --enabled
- - - - --certificate-pem-outfile "claim-certs/claim.pem.crt" \
      - --public-key-outfile "claim-certs/claim.public.pem.key" \
      - --private-key-outfile "claim-certs/claim.private.pem.key" \
      - --set-as-active
- - - - -jar ./GreengrassInstaller/lib/Greengrass.jar \
      - --trusted-plugin ./GreengrassInstaller/aws.greengrass.FleetProvisioningByClaim.jar \
      - --init-config ./GreengrassInstaller/config.yaml \
        
        rootPath: "/greengrass/v2"
        
        awsRegion: "us-west-2"
        
        iotDataEndpoint: "device-data-prefix-ats.iot.us-west-2.amazonaws.com"
        
        iotCredentialEndpoint: "device-credentials-prefix.credentials.iot.us-west-2.amazonaws.com"
        
        iotRoleAlias: "GreengrassCoreTokenExchangeRoleAlias"
        
        provisioningTemplate: "GreengrassFleetProvisioningTemplate"
        
        claimCertificatePath: "/greengrass/v2/claim-certs/claim.pem.crt"
        
        claimCertificatePrivateKeyPath: "/greengrass/v2/claim-certs/claim.private.pem.key"
        
        rootCaPath: "/greengrass/v2/AmazonRootCA1.pem"
        
        templateParameters:
        
        ThingName: "MyGreengrassCore"
        
        ThingGroupName: "MyGreengrassCoreGroup"
      - --component-default-user ggc_user:ggc_group \
      - --setup-system-service true