I'm writing an IoT Wireless Gateway provisioning script using Boto3 and cannot figure out how to create, download, and update `cups.key` and `cups.trust` files. I've managed to get the `cups.crt` file using [describe_certificate()](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/iot.html#IoT.Client.describe_certificate) but I cannot figure out which Boto methods will get me the rest of the certs necessary to connect a gateway.

Using Boto3 to get cups.crt, cups.key and cups.trust

I'm writing an IoT Wireless Gateway provisioning script using Boto3 and cannot figure out how to create, download, and update cups.key and cups.trust files.

I've managed to get the cups.crt file using describe_certificate() but I cannot figure out which Boto methods will get me the rest of the certs necessary to connect a gateway.

AWS-User-9404308
1年前
Digging a little deeper, I believe since these are only available once that I need to capture them when creating using create_keys_and_certificate(), which I have working now..

However, a new question is create_keys_and_certificate() gives me:

certificatePem

PrivateKey

PublicKey

And I'm not clear on how these correspond to cups.key, cups.trust and cups.crt. Is this correct? certificatePem = cups.crt PrivateKey = cups.key PublicKey = cups.trust? Or is cups.trust a different certificate not offered by the create_keys_and_certificate() response?