本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
基本任務政策範例
此範例展示任務目標所需的政策陳述式,該目標為單一裝置,可接收任務請求並與 AWS IoT溝通任務執行狀態。
將 us-west-2:57 EXAMPLE833
替換為冒 AWS 區域號字符(:) 和您的 12 位 AWS 帳戶 數字,然後ThingName用代表中設備的物件資源的名稱替換唯
一的。 AWS IoT
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iot:Connect" ], "Resource": [ "arn:aws:iot:
us-west-2:57EXAMPLE833
:client/uniqueThingName
" ] }, { "Effect": "Allow", "Action": [ "iot:Publish" ], "Resource": [ "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/test/dc/pubtopic", "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/$aws/events/job/*", "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/$aws/events/jobExecution/*", "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/$aws/things/uniqueThingName
/jobs/*" ] }, { "Effect": "Allow", "Action": [ "iot:Subscribe" ], "Resource": [ "arn:aws:iot:us-west-2:57EXAMPLE833
:topicfilter/test/dc/subtopic", "arn:aws:iot:us-west-2:57EXAMPLE833
:topicfilter/$aws/events/jobExecution/*", "arn:aws:iot:us-west-2:57EXAMPLE833
:topicfilter/$aws/things/uniqueThingName
/jobs/*" ] }, { "Effect": "Allow", "Action": [ "iot:Receive" ], "Resource": [ "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/test/dc/subtopic", "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/$aws/things/uniqueThingName
/jobs/*" ] }, { "Effect": "Allow", "Action": [ "iot:DescribeJobExecution", "iot:GetPendingJobExecutions", "iot:StartNextPendingJobExecution", "iot:UpdateJobExecution" ], "Resource": [ "arn:aws:iot:us-west-2:57EXAMPLE833
:topic/$aws/things/uniqueThingName
" ] } ] }