PROSAGA码农传奇-IOT-使用无服务器框架为多个IoT设备设置AWS IoT

<div class =“post-text”itemprop =“text”>
  
    的
      编辑05/09/2018：
    </强>
     我发现这篇博文，很好地描述了我的方法：
    <a href =“https://aws.amazon.com/de/blogs/iot/ensure-secure-communication-with-aws-iot-core-using-the-certificate-vending-machine-reference-application/” rel =“nofollow noreferrer”>
      使用证书自动售货机参考应用程序确保与AWS IoT核心的安全通信
    </A>
  
  
    的
       - 
    </强>
  
  
    你可以看看
    <a href="https://docs.aws.amazon.com/iot/latest/developerguide/jit-provisioning.html" rel="nofollow noreferrer">
      即时配置
    </A>
     或者建立自己的解决方案
    <a href="https://docs.aws.amazon.com/iot/latest/developerguide/programmatic-provisioning.html" rel="nofollow noreferrer">
      程序化供应
    </A>
    。
  
  
    我已多次处理这个主题，并且必须意识到它在很大程度上取决于用例，这更有意义。安全性也是一个值得关注的方面。您不希望有一个公共API负责整个Internet可以访问的JIT设备注册。
  
  
    一个简单的基于Programmatic Provisioning的场景可能如下所示：您构建一个东西（可能是传感器），它应该能够连接到AWS IoT并具有内部供应流程。
  
  
    简单的配置过程：
  
  <OL>
    <LI>
      事情已建成
    </LI>
    <LI>
      东西有一个序列号
    </LI>
    <LI>
      Thing通过内部服务器注册自己
    </LI>
  </醇>
  
    在服务器上运行的注册代码看起来像这样（JS + AWS JS SDK）：
  
   <pre>
 <code>
 // Modules
const AWS = require('aws-sdk')

// AWS
const iot = new AWS.Iot({ region: process.env.region })

// Config
const templateBodyJson = require('./register-thing-template-body.json')

// registerThing
const registerThing = async ({ serialNumber = null } = {}) => {
  if (!serialNumber) throw new Error('`serialNumber` required!')

const {
    certificateArn = null,
    certificateId = null,
    certificatePem = null,
    keyPair: {
      PrivateKey: privateKey = null,
      PublicKey: publicKey = null
    } = {}
  } = await iot.createKeysAndCertificate({ setAsActive: true }).promise()
  const registerThingParams = {
    templateBody: JSON.stringify(templateBodyJson),
    parameters: {
      ThingName: serialNumber,
      SerialNumber: serialNumber,
      CertificateId: certificateId
    }
  }
  const { resourceArns = null } = await iot.registerThing(registerThingParams).promise()

return {
    certificateArn,
    certificateId,
    certificatePem,
    privateKey,
    publicKey,
    resourceArns
  }
}

const unregisterThing = async ({ serialNumber = null } = {}) => {
  if (!serialNumber) throw new Error('`serialNumber` required!')

try {
    const thingName = serialNumber
    const { principals: thingPrincipals } = await iot.listThingPrincipals({ thingName }).promise()
    const certificates = thingPrincipals.map((tp) => ({ certificateId: tp.split('/').pop(), certificateArn: tp }))

for (const { certificateId, certificateArn } of certificates) {
      await iot.detachThingPrincipal({ thingName, principal: certificateArn }).promise()
      await iot.updateCertificate({ certificateId, newStatus: 'INACTIVE' }).promise()
      await iot.deleteCertificate({ certificateId, forceDelete: true }).promise()
    }

await iot.deleteThing({ thingName }).promise()

return {
      deleted: true,
      thingPrincipals
    }
  } catch (err) {
    // Already deleted!
    if (err.code && err.code === 'ResourceNotFoundException') {
      return {
        deleted: true,
        thingPrincipals: []
      }
    }

throw err
  }
}

</code>
 </pre>
  
    的
      注册 - 事物 - 模板body.json：
    </强>
  
   <pre>
 <code>
 {
 "Parameters": {
 "ThingName": {
 "Type": "String"
 },
 "SerialNumber": {
 "Type": "String"
 },
 "CertificateId": {
 "Type": "String"
 }
 },
 "Resources": {
 "thing": {
 "Type": "AWS::IoT::Thing",
 "Properties": {
 "ThingName": {
 "Ref": "ThingName"
 },
 "AttributePayload": {
 "serialNumber": {
 "Ref": "SerialNumber"
 }
 },
 "ThingTypeName": "NewDevice",
 "ThingGroups": ["NewDevices"]
 }
 },
 "certificate": {
 "Type": "AWS::IoT::Certificate",
 "Properties": {
 "CertificateId": {
 "Ref": "CertificateId"
 }
 }
 },
 "policy": {
 "Type": "AWS::IoT::Policy",
 "Properties": {
 "PolicyName": "DefaultNewDevicePolicy"
 }
 }
 }
}

</code>
 </pre>
  
    确保您拥有所有“NewDevice”Thing类型，组和策略。还要记住ThingName = SerialNumber（对于unregisterThing很重要）。
  
</DIV>