AWS IoT device provisioning: pragmatic scalable approach
summary
TIER runs a pragmatic AWS IoT provisioning flow for 70k devices using provisioning by claim with a shared bootstrap certificate that exchanges for unique device certificates the recommended CSR path keeps private keys on device and avoids server key distribution. Key practices include bootstrap certificate policies and strict device certificate scopes, backing up and restoring certs while handling AWS SNI certificate mode, and cost cuts via basic ingest and selective CloudWatch forwarding.
AI-written summary · about
chapters (11)
- 0:00AWS IoT device provisioning
- 1:35Device provisioning flows
- 3:02Provisioning flow breakdown
- 5:31Bootstrap certificate policies
- 7:21Certificate policies and security
- 8:45Disaster recovery strategies
- 10:53SNI only and MQTT checks
- 13:03IoT forwarding rules and costs
- 14:07Cost-saving for message routing
- 16:57Provisioning best practices
- 17:17Final checklist and Q&A
related talks
40mTrusted Internet of Things Device Onboarding and Lifecycle Management
28mTransform Tomorrow's Industries With AWS IoT
10mZero Touch Provisioning: the path to massive adoption
30mAWS powers edge-to-cloud solutions
39mZero touch secure device onboarding and management
35mDiscover how to build a robust IoT infrastructure on AWS
20mOAuth 2.0 and the Internet of Things (IoT)
31mDevSecOps with IoT - Is it a myth?