How to change the greengrass v2 config on a core device

0

Hi there I have a problem with the iot permision on my device which already have gg installed and running

so when i run the gg installer I put GGTokenAccessRole for "iotRoleAlias" instead of the actual name

2022-03-18T05:43:45.295Z [ERROR] (pool-2-thread-5) com.aws.greengrass.tes.CredentialRequestHandler: TES responded with status code: 403. Caching response. {"message":"Access Denied"}. {iotCredentialsPath=/role-aliases/GGTokenAccessRole/credentials}
2022-03-18T05:43:45.296Z [ERROR] (pool-2-thread-5) com.aws.greengrass.tes.CredentialRequestHandler: Error in retrieving AwsCredentials from TES. {iotCredentialsPath=/role-aliases/GGTokenAccessRole/credentials, credentialData=TES responded with status code: 403. Caching response. {"message":"Access Denied"}}
2022-03-18T05:44:27.897Z [ERROR] (pool-2-thread-5) com.aws.greengrass.tes.CredentialRequestHandler: Error in retrieving AwsCredentials from TES. {iotCredentialsPath=/role-aliases/GGTokenAccessRole/credentials, credentialData=TES responded with status code: 403. Caching response. {"message":"Access Denied"}}
2022-03-18T05:45:22.119Z [ERROR] (pool-2-thread-5) com.aws.greengrass.tes.CredentialRequestHandler: Error in retrieving AwsCredentials from TES. {iotCredentialsPath=/role-aliases/GGTokenAccessRole/credentials, credentialData=TES responded with status code: 403. Caching response. {"message":"Access Denied"}}

Also i did not create iot aliase so i wonder if that is a problem? can it use a IAMF role directly ?

Thanks for your help

asked 2 years ago607 views
1 Answer
1
Accepted Answer

You can not use an IAM role directly. You can either create a role alias with the name you’ve already given to greengrass, or you can do a deployment that specifies the nucleus component and deploys configuration to merge an update for iotRoleAlias with a new name. Here is some documentation that might be useful: https://docs.aws.amazon.com/greengrass/v2/developerguide/update-component-configurations.html#:~:text=%22reset%22%3A%20%5B%22%22%5D-,Merge%20updates,-Merge%20updates%20define

https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-nucleus-component.html#:~:text=Greengrass%20Core%20software.-,iotRoleAlias,-The%20AWS%20IoT

Cheers, Janice

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions