Video 2.2 creating an attaching policies. In this video, we will learn the following what is an AWS IoT policy? And why do we create it? How to create a policy? How to attach a policy to the certificate? Getting started with the hardware?

What is a policy and why do we created AWS IoT policies are used to authorize your devices to perform AWS IoT operations, such as connecting, subscribing, or publishing to topics. To allow your device to perform AWS IoT operations, you must create an AWS IoT policy and attach it to your device certificate, how to create a policy. In the previous video, we have registered a thing and attached certificates to the thing. Now, we will create a policy on the left hand side in the navigation pane, select secure Here you can see the certificate that you created in the previous video. Now, choose policies create a policy, it will direct you to this page. Now, we can give a name to the policy, I am giving my RP underscore policy because my thing name is my archive.

I gave similar names so that I can easily identify my thing and its policy. You can give any name for your thing and policy. Now, we will add statements action, the syntax the writing and action is IoT colon operation name. Here, I will be using an asterisk in place of operation name, which means everything. For example, if we select IoT colon publish, then it allows clients to publish to the specific topic pattern only. So I'm giving IoT colon asterisk which will include all the above permissions.

In resources, Aaron, you can restrict which devices or clients can connect by specifying a client errand. Here also, I will be using asterisk as they don't want to specify a particular client or device on beforehand. Now, hello, and then create. Now the policies successfully created, how to attach a policy to the certificate and the secure you can find certificates selected and this is a certificate that we created while registering our Raspberry Pi thing. Now, here you can see these three dots selected and a drop down menu appears like this. Now find attach policy selected.

Here you can find the policy that was created a few minutes ago. Select and then attach to verify if the thing certificates and policies are attached correctly. So Select a certificate by clicking on it. Now here on the left hand side, you can find policies, select and you can see the policy which is attached to the certificate. Now select things. This is the thing that is attached to the certificate.

This is also the same thing we have created in the previous video. So the thing certificates and the policies are attached correctly. Now, are you really excited to test this with your hardware? Then go grab your Raspberry Pi. I hope everyone is familiar working with the PI board. If not, please check the resources section.

A quick checklist format the SD card download Raspbian stretch with desktop. Write the image file to the SD card. Create an SSH file insert SD card into Raspberry Pi. I hope your Raspberry Pi is ready to go. In the previous video. We downloaded three certificates while registering it Root ca certificate, thing certificate and a private key.

Now copy these three certificate onto your Raspberry Pi. I'm using cyberduck a third party tool for transferring the certificate from my laptop to the Raspberry Pi. I have created a folder with named certs on whereas berry pie and copied the three certificates inside the folder. Here are my three certificates, made sure that the three certificates are with the correct extensions. ELLs rename them, you can use any file transferring tool, but make sure that the files are transferred. Once if you have completed the transfer of the three certificates to your Raspberry Pi, then you have successfully established a hardware connection to AWS with the thing name registered as my advice.

In this video, we learned the following what is an AWS IoT policy? And why do we create it? How to create a policy How to attach a policy to the certificate. Get started with the hardware. In the next video, we'll work on connecting and testing. See you in the next video.