Ignition AWS IoT Integration: Cloud-Connected Industrial Data

# Create a Thing in AWS IoT Core
aws iot create-thing --thing-name "IgnitionGateway01"

# Create and attach a permissive IoT policy
aws iot create-policy --policy-name "IgnitionPolicy" --policy-document '{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "iot:Connect",
        "iot:Publish",
        "iot:Subscribe",
        "iot:Receive"
      ],
      "Resource": "arn:aws:iot:us-east-1:123456789012:*"
    }
  ]
}'

# Create keys and certificate
aws iot create-keys-and-certificate \
  --set-as-active \
  --certificate-pem-outfile "ignition-cert.pem" \
  --public-key-outfile "ignition-public.key" \
  --private-key-outfile "ignition-private.key"

# Attach the policy to the certificate
aws iot attach-policy \
  --policy-name "IgnitionPolicy" \
  --target "arn:aws:iot:us-east-1:123456789012:cert/<certificate-id>"

# Attach the certificate to the Thing
aws iot attach-thing-principal \
  --thing-name "IgnitionGateway01" \
  --principal "arn:aws:iot:us-east-1:123456789012:cert/<certificate-id>"

# Download Amazon Root CA
curl -o AmazonRootCA1.pem \
  https://www.amazontrust.com/repository/AmazonRootCA1.pem

# MQTT Transmission Module Settings (Ignition Gateway Config)
# ─────────────────────────────────────────────────────────────
# Server URL:    ssl://<your-iot-endpoint>.iot.us-east-1.amazonaws.com:8883
# Client ID:     IgnitionGateway01
# CA Certificate: AmazonRootCA1.pem
# Client Cert:   ignition-cert.pem
# Private Key:   ignition-private.key
# Topic:         ignition/plant01/data
# QoS:           1 (At least once)
# Keep Alive:    60 seconds

# Verify your endpoint
aws iot describe-endpoint --endpoint-type iot:Data-ATS
# Returns: "<account-id>-ats.iot.<region>.amazonaws.com"

# Create an IoT Rule to route data to Timestream
aws iot create-topic-rule --rule-name "IgnitionToTimestream" \
  --topic-rule-payload '{
    "sql": "SELECT temperature, pressure, flow_rate, timestamp() AS time FROM '\''ignition/plant01/data'\''",
    "actions": [
      {
        "timestream": {
          "roleArn": "arn:aws:iam::123456789012:role/IoTTimestreamRole",
          "databaseName": "IndustrialDB",
          "tableName": "SensorReadings",
          "dimensions": [
            { "name": "plant", "value": "plant01" },
            { "name": "gateway", "value": "IgnitionGateway01" }
          ]
        }
      },
      {
        "s3": {
          "roleArn": "arn:aws:iam::123456789012:role/IoTS3Role",
          "bucketName": "ignition-raw-data",
          "key": "plant01/${topic()}/${timestamp()}.json"
        }
      }
    ]
  }'