Step 5: Create the Amazon IoT role alias - Amazon Kinesis Video Streams
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Step 5: Create the Amazon IoT role alias

Follow these procedures to create an Amazon IoT role alias for the IAM role that you created in Step 4: Create an IAM role. A role alias is an alternate data model that points to the IAM role. An Amazon IoT credentials provider request must include a role alias to indicate which IAM role to assume in order to obtain temporary credentials from the Amazon Security Token Service (Amazon STS). For more information, see How to use a certificate to get a security token.

Create the Amazon IoT role alias
  1. Sign in to the Amazon Web Services Management Console and open the Amazon IoT Core console at

  2. Verify that the appropriate Region is selected.

  3. On the left navigation, select Security and then choose Role Aliases.

  4. Choose Create role alias.

  5. Enter a name for your role alias.

    Example: KvsEdgeAgentRoleAlias

  6. In the Role dropdown, select the IAM role you created in Step 4: Create an IAM role.

  7. Choose Create. On the next page, you see a note that your role alias was successfully created.

  8. Search for and select the newly created role alias. Make note of the Role alias ARN. You need this for the Amazon IoT policy in the next step.