Create a VPC endpoint policy for Amazon IoT SiteWise - Amazon IoT SiteWise
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Create a VPC endpoint policy for Amazon IoT SiteWise

You can attach an endpoint policy to your VPC endpoint that controls access to Amazon IoT SiteWise. The policy specifies the following information:

  • The principal that can perform operations.

  • The operations that can be performed.

  • The resources on which operations can be performed.

For more information, see Control access to VPC endpoints using endpoint policies in the Amazon VPC User Guide.

Example: VPC endpoint policy for Amazon IoT SiteWise actions

The following is an example of an endpoint policy for Amazon IoT SiteWise. When attached to an endpoint, this policy grants access to the listed Amazon IoT SiteWise actions for the user iotsitewiseadmin in Amazon account 123456789012 on the specified asset.

{
    "Statement": [
        {
            "Action": [
                "iotsitewise:CreateAsset",
                "iotsitewise:ListGateways",
                "iotsitewise:ListTagsForResource"
            ],
            "Effect": "Allow",
            "Resource": "arn:aws-cn:iotsitewise:cn-north-1:123456789012:asset/a1b2c3d4-5678-90ab-cdef-33333EXAMPLE",
            "Principal": {
                "AWS": [
                    "123456789012:user/iotsitewiseadmin"
                ]
            }
        }
    ]
}