Amazon IoT Device Management Documentation

Amazon IoT Device Management helps you register, organize, monitor, and remotely manage IoT devices at scale. With Amazon IoT Device Management, you can scale your fleets and reduce the effort of managing large and diverse IoT device deployments.

Amazon IoT Device Management helps you register new devices by using the IoT management console or API to upload templates that you populate with information like device manufacturer and serial number, X.509 identity certificates, or security policies. Then, the service is designed so you can configure the entire fleet of devices with this information with a few clicks in the management console.

Amazon IoT Device Management is designed so you can group your device fleet into a hierarchical structure based on function, security requirements, or other categories. You can group one device in a room, group devices together that operate on the same floor, or group all the devices that operate within a building. Then, the service is designed so you can use these groups to manage access policies, view operational metrics, or perform actions on your devices across the entire group. The service can also help you to organize your devices with dynamic thing groups. Dynamic thing groups are designed to help you quickly add devices that meet your specified criteria and remove the devices that no longer match the criteria.

Amazon IoT Device Management helps you to query a group of devices and aggregate statistics on device records based on any combination of device attribute, state and connectivity indexing so that you can better organize and understand your fleet. For example, you can search for a group of connected temperature sensors in a manufacturing facility, count the number of sensors with a specific firmware version, and find the average temperature reading for those sensors.

Amazon IoT Device Management is designed to let you collect device logs so that in the event of a problem you can query the log data to figure out what went wrong. The service is also designed so you can configure the logs to include only the metrics that are critical to device performance to help you identify issues quickly. For example, you can include device metrics like error codes that indicate download failures or device restart counters, and quickly identify and troubleshoot issues on devices within the device group.

Amazon IoT Device Management is designed to allow you to push software and firmware to devices in the field to help you patch security vulnerabilities and improve device functionality. The service is designed to enable you to execute bulk updates, control deployment velocity, set failure thresholds, and define jobs to update device software so they are always running the latest version. The service is also designed to send actions such as device reboots or factory resets remotely to help you fix software issues in the device or restore the device to its original settings.

With Secure Tunneling, you can rapidly build remote access solutions to connect to devices on isolated networks or behind firewalls. This feature is designed so you can establish trusted connections that allow you to comply with your customers’ corporate security policies, without the need to adjust inbound firewall configurations or manage proxies for each user network. This is accomplished by a mutually initiated tunnel connection between source and destination devices that is brokered through the Secure Tunneling feature in Amazon IoT Device Management. These device connections can be configured with a user defined timeout setting designed to close connections after a certain period of time.

Amazon IoT Device Management is designed to allow you to create no-code, fully-managed web applications using Fleet Hub to visualize and interact with your device fleets connected to Amazon IoT. Fleet Hub is designed so you can search across your large and diverse fleets and view device state and health data—such as connection status, firmware version, country code, or battery level. It is also designed so you can program alarms to be triggered by rule-based changes to device status and health metrics and customizable by each end user, so you can be notified of potential issues. Once alerted to an alarm, you can take corrective actions, such as deploying a firmware update or rebooting a device. Fleet Hub’s integration with the many Amazon IoT Device Management features as well as across other Amazon IoT services is designed so you can interact with your devices to do so, like pushing an OTA (“over the air”) update via Jobs or opening a Secure Tunnel to reconfigure a device. Fleet Hub is designed so users can access the web applications from a browser on any web-enabled desktop, tablet, or phone and sign-in with their corporate credentials through a single sign-on (SSO) experience, and so IT administrators can control access to operational data from devices and equipment for different end users by adding users from their corporate directory and defining permissions through Amazon Single-Sign On (SSO), Active Directory, and Amazon Organizations.

For additional information about service controls, security features and functionalities, including, as applicable, information about storing, retrieving, modifying, restricting, and deleting data, please see https://docs.amazonaws.cn/en_us. This additional information does not form part of the Documentation for purposes of the Sinnet Customer Agreement for Amazon Web Services (Beijing Region), Western Cloud Data Customer Agreement for Amazon Web Services (Ningxia Region) or other agreement between you and Sinnet or NWCD governing your use of services of Amazon Web Services China Regions.