ADTRAN 7310-8 Getting Started Manual page 5

c. After updating the policy, select Review Policy to open the Review Policy page and make the
following changes:
• In the Name field, enter AWSIoTWirelessGatewayCertManager.
• In the Description field, enter a description of your choice.
d. After reviewing the policy and specifying the name and description, select Create Policy to create
the policy. A confirmation message indicating that the policy has been created is displayed.
5. Once the correct policy is specified, select Next: Tags and then Next: Review to review and create the
IAM role.
6. In the role review page, enter IoTWirelessGatewayCertManagerRole in the Role Name field and select
Create Role to the create the IAM role.
NOTE: You MUST enter the role name as IoTWirelessGatewayCertManagerRole and cannot use a
different name. This is for consistency with future releases.
7. Once the role is created, you will need to specify the trust relationships and policies for the role. In the
confirmation message indicating that the role has been created, select
IoTWirelessGatewayCertManagerRole to edit the newly created role.
8. In the resulting role Summary page, select the Trust Relationships tab and then select Edit Trust
Relationship.
9. Navigate to the Policy Document for the role's trust relationship and change the Principal property to
represent the IoT wireless service. The Principal value should look like the following:
"Principal": {
"Service": "iotwireless.amazonaws.com"
}
10. After changing the Principal property, the complete policy document should look like the following:
{
"Version": "2012-10-17",
"Statement": [
]
}
11. If the policy is specified correctly, select Update Trust Policy to save your changes and exit the role
configuration.
Once these steps are completed, you have successfully configured the IAM CUPS role
(IoTWirelessGatewayCertManagerRole) and can proceed to configuring the AWS IoT Core destination role.
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
{
"Sid": "IoTWirelessGatewayCertManager",
"Effect": "Allow",
"Action": [
"iot:CreateKeysAndCertificate",
"iot:DescribeCertificate",
"iot:ListCertificates",
"iot:RegisterCertificate"
],
"Resource": "*"
}
]
}
NOTE: You MUST enter the policy name as AWSIoTWirelessGatewayCertManager and
cannot use a different name. This is for consistency with future releases.
{
"Effect": "Allow",
"Principal": {
"Service": "iotwireless.amazonaws.com"
},
"Action": "sts:AssumeRole",
"Condition": {}
}