AWS::IoT::JobTemplate PresignedUrlConfig - AWS CloudFormation

AWS::IoT::JobTemplate PresignedUrlConfig

Configuration for pre-signed S3 URLs.


To declare this entity in your AWS CloudFormation template, use the following syntax:


{ "ExpiresInSec" : Integer, "RoleArn" : String }


ExpiresInSec: Integer RoleArn: String



How long (in seconds) pre-signed URLs are valid. Valid values are 60 - 3600, the default value is 3600 seconds. Pre-signed URLs are generated when Jobs receives an MQTT request for the job document.

Required: No

Type: Integer

Minimum: 60

Maximum: 3600

Update requires: Replacement


The ARN of an IAM role that grants grants permission to download files from the S3 bucket where the job data/updates are stored. The role must also grant permission for IoT to download the files.


For information about addressing the confused deputy problem, see cross-service confused deputy prevention in the AWS IoT Core developer guide.

Required: Yes

Type: String

Minimum: 20

Maximum: 2048

Update requires: Replacement