aws iot create-policy

Creates an IoT policy. AWS CLI reference

1 example 3 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To create an AWS IoT policy

The following create-policy example creates an AWS IoT policy named TemperatureSensorPolicy. The policy.json file contains statements that allow AWS IoT policy actions.

aws iot create-policy --policy-name TemperatureSensorPolicy --policy-document file://policy.jsonIdentify

--policy-nameThe policy name.

--policy-documentThe JSON document that describes the policy.

Contents of policy.json:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "iot:Publish",
                "iot:Receive"
            ],
            "Resource": [
                "arn:aws:iot:us-west-2:123456789012:topic/topic_1",
                "arn:aws:iot:us-west-2:123456789012:topic/topic_2"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "iot:Subscribe"
            ],
            "Resource": [
                "arn:aws:iot:us-west-2:123456789012:topicfilter/topic_1",
                "arn:aws:iot:us-west-2:123456789012:topicfilter/topic_2"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "iot:Connect"
            ],
            "Resource": [
                "arn:aws:iot:us-west-2:123456789012:client/basicPubSub"
            ]
        }
    ]
}

Its output

{
    "policyName": "TemperatureSensorPolicy",
    "policyArn": "arn:aws:iot:us-west-2:123456789012:policy/TemperatureSensorPolicy",
    "policyDocument": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"iot:Publish\",\"iot:Receive\"],\"Resource\":[\"arn:aws:iot:us-west-2:123456789012:topic/topic_1\",\"arn:aws:iot:us-west-2:123456789012:topic/topic_2\"]},{\"Effect\":\"Allow\",\"Action\":[\"iot:Subscribe\"],\"Resource\":[\"arn:aws:iot:us-west-2:123456789012:topicfilter/topic_1\",\"arn:aws:iot:us-west-2:123456789012:topicfilter/topic_2\"]},{\"Effect\":\"Allow\",\"Action\":[\"iot:Connect\"],\"Resource\":[\"arn:aws:iot:us-west-2:123456789012:client/basicPubSub\"]}]}",
    "policyVersionId": "1"
}

For more information, see AWS IoT Policies in the AWS IoT Developers Guide.

Options

3 in the AWS CLI reference

--policy-documentThe JSON document that describes the policy.

--policy-nameThe policy name.

--tagsMetadata which can be used to manage the policy.