Create the Amazon IoT role alias
Follow these procedures to create an Amazon IoT role alias for the IAM role that you created in Create an IAM role. A role alias is an alternate data model that points to the IAM role. An Amazon IoT credentials provider request must include a role alias to indicate which IAM role to assume in order to obtain temporary credentials from the Amazon Security Token Service (Amazon STS). For more information, see How to use a certificate to get a security token.
Create the Amazon IoT role alias
-
Sign in to the Amazon Web Services Management Console and open the Amazon IoT Core console at https://console.amazonaws.cn/iot/
. -
Verify that the appropriate Region is selected.
-
On the left navigation, select Security and then choose Role Aliases.
-
Choose Create role alias.
-
Enter a name for your role alias.
Example:
KvsEdgeAgentRoleAlias
-
In the Role dropdown, select the IAM role you created in Create an IAM role.
-
Choose Create. On the next page, you see a note that your role alias was successfully created.
-
Search for and select the newly created role alias. Make note of the Role alias ARN. You need this for the Amazon IoT policy in the next step.