AWS IoT Certificate Authentication Test
AWS IoT allow user to use x.509 certificate to get services authentication(like KVS) via AWS IoT core. To verify if policies are correctly attached, we can use curl to check if temporary token can be granted or not:
1 | curl -H "x-amzn-iot-thingname:my_thing_name" --cert certificate.pem --key private.pem.key https://xxxxxxxxxxxxxx.credentials.iot.us-east-1.amazonaws.com/role-aliases/my_thing_role_aliases/credentials --cacert cacert.pem |