aws-iot

List all IoT things

$ aws iot list-things

$ aws iot create-thing --thing-name [device_name]

$ aws iot describe-thing --thing-name [device_name]

$ aws iot create-keys-and-certificate --set-as-active --certificate-pem-outfile [cert.pem] --private-key-outfile [private.key]

$ aws iot attach-policy --policy-name [policy_name] --target [certificate_arn]

$ aws iot attach-thing-principal --thing-name [device_name] --principal [certificate_arn]

$ aws iot describe-endpoint --endpoint-type iot:Data-ATS

$ aws iot list-certificates

aws iot subcommand [options]

aws iot is a subcommand of the AWS CLI that manages AWS IoT Core, a platform for connecting IoT devices to the cloud. It handles device registry, security, and message routing.
Things are representations of physical devices in the registry. Each thing can have attributes, types, and groups for organization. Devices authenticate using X.509 certificates and policies control what actions they can perform.
The message broker uses MQTT, HTTPS, and WebSocket protocols. Rules engine processes incoming messages and routes them to AWS services like Lambda, S3, DynamoDB, or other IoT topics.

list-things

List registered things.

Register a new thing.

Get thing details.

Remove a thing from registry.

Generate a new certificate and key pair.

List certificates in the account.

Attach an IoT policy to a certificate or identity.

Remove a policy attachment.

Associate a certificate with a thing.

Get the IoT endpoint for connections.

Create an IoT policy document.

List thing groups.

Name of the thing.

File to write certificate PEM.

File to write private key.

Name of the IoT policy.

Endpoint type (iot:Data-ATS recommended).

Certificates must be activated before use. Deleting a thing does not delete its certificates or policies. Use ATS (Amazon Trust Services) endpoints for production. Thing names are unique per account/region. Policies are separate from IAM policies and follow IoT-specific syntax.

AWS IoT was announced at AWS re:Invent 2015 and launched in general availability in January 2016. The platform has expanded to include IoT Greengrass for edge computing, IoT Analytics for data analysis, IoT Device Management for fleet operations, and IoT SiteWise for industrial data. The core service continues to evolve with features like fleet provisioning and configurable endpoints.

aws(1), mosquitto(1), aws-iot-data(1), aws-greengrass(1)