… Such certificates are normally intended to allow a device to access only its own MQTT topics and its own Device Shadow. However, on the examined device, the assigned AWS IoT policy was too broad. …
… Amazon dokumentiert genau diesen Fehlertyp im AWS IoT Device Defender. Der Prüfschritt „IOT POLICY OVERLY PERMISSIVE CHECK“ bewertet Richtlinien mit zu weit gefassten Publish-, Subscribe- oder Device-Shadow-Rechten als kritisch. …
… This refers to systems that process sensor data not in the cloud, but directly on the device — in robots, autonomous machines, industrial controllers, or smart end devices. …