EARDATEK EWN-8720CMN1AA, Getting Started Manual

Page: 13 / 33

EWN-8720CMN1AA Getting Started Guide
2.2 Create a policy
A policy defines a device’s access permissions to IoT Core. To create a policy, navigate to Secure -> Policies. Then click “Create a policy”
NOTE – this policy grants unrestricted access for all iot operations, and is to be used only in a development environment. For non-dev
environments, all devices in your fleet must have credentials with privileges that authorize intended actions only, which include (but not
limited to) AWS IoT MQTT actions such as publishing messages or subscribing to topics with specific scope and context. The specific permission
policies can vary for your use cases. Identify the permission policies that best meet your business and security requirements.
For sample policies, refer to
https://docs.aws.amazon.com/iot/latest/developerguide/example-iot-policies.html .
Also refer to https://docs.aws.amazon.com/iot/latest/developerguide/security-best-practices.html