Create a workspace

On the Amazon IoT TwinMaker console home page, choose Workspaces in the left navigation pane.

On the Workspaces page, choose Create workspace.

On the Create a Workspace page, enter a name for your workspace.

(Optional) Add a description for your workspace.

Under S3 resource, choose Create an S3 bucket. This option creates an Amazon S3 bucket where Amazon IoT TwinMaker stores information and resources related to the workspace. Each workspace requires its own bucket.

Under Execution role, choose either Auto-generate a new role or the custom IAM role that you created as for this workspace.

If you choose Auto-generate a new role, Amazon IoT TwinMaker attaches a policy to the role that grants permission to the new service role to access other Amazon services, including permission to read and write to the Amazon S3 bucket that you specify in the previous step. For information about assigning permissions to this role, see Create and manage a service role for Amazon IoT TwinMaker.

Choose Create Workspace. The following banner appears at the top of the Workspaces page.

Choose Get json. We recommend you add the IAM policy you see to the IAM role that Amazon IoT TwinMaker created for users and accounts that view the Grafana dashboard. The name of this role follows this pattern: workspace-nameDashboardRole, For instructions on how to create a policy and attach it to a role, see Modifying a role permissions policy (console).

The following example contains the policy to add to the dashboard role.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject"
      ],
      "Resource": [
        "arn:aws:s3:::iottwinmaker-workspace-workspace-name-lower-case-account-id",
        "arn:aws:s3:::iottwinmaker-workspace-workspace-name-lower-case-account-id/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "iottwinmaker:Get*",
        "iottwinmaker:List*"
      ],
      "Resource": [
        "arn:aws:iottwinmaker:us-east-1:account-id:workspace/workspace-name",
        "arn:aws:iottwinmaker:us-east-1:account-id:workspace/workspace-name/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": "iottwinmaker:ListWorkspaces",
      "Resource": "*"
    }
  ]
}