dave-malone

from __future__ import print_function
import sys
import ssl
import time
import datetime
import logging, traceback
import paho.mqtt.client as mqtt

IoT_protocol_name = "x-amzn-mqtt-ca"
aws_iot_endpoint = "a1tq0bx5we8tnk-ats.iot.us-east-1.amazonaws.com"

dave-malone

rm hello_world_python_lambda.zip
zip -r hello_world_python_lambda.zip greengrasssdk greengrassHelloWorld.py

update_lambda_result=$(aws lambda update-function-code \
  --function-name Greengrass_HelloWorld \
  --zip-file fileb://hello_world_python_lambda.zip \
  --publish)


latest_lambda_version=$(echo "$update_lambda_result" | jq -r '.Version')

dave-malone

#
# Copyright 2010-2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
#

# greengrassHelloWorld.py
# Demonstrates a simple publish to a topic using Greengrass core sdk
# This lambda function will retrieve underlying platform information and send
# a hello world message along with the platform information to the topic 'hello/world'
# The function will sleep for five seconds, then repeat.  Since the function is
# long-lived it will run forever when deployed to a Greengrass core.  The handler

dave-malone

Modify your Thing's policy to allow it to connect to the Greengrass Discovery service:

• Secure -> Policies
• Select your Thing's Policy
• Edit your Thing's Policy document, and Save as a new version. See my example policy, specifically the addition of the greengrass:Discover statement at the bottom of the policy:

{
  "Version": "2012-10-17",
  "Statement": [

dave-malone

from avro.datafile import DataFileWriter
from avro.io import DatumWriter
from AWSIoTPythonSDK.MQTTLib import AWSIoTMQTTClient
import avro.schema
import logging
import time
import os

avro_users_schema_file = "user.avsc"
avro_users_file = "users.avro"

dave-malone

sudo /bin/dd if=/dev/zero of=/var/swap.1 bs=1M count=1024
sudo /sbin/mkswap /var/swap.1
sudo chmod 600 /var/swap.1
sudo /sbin/swapon /var/swap.1

Remove swap space once done

dave-malone

  - name: DefaultOktaRoles
    baseline_products:
      - AWS-Landing-Zone-Account-Vending-Machine
    template_file: templates/aws_baseline/aws-landing-zone-default-okta-roles.template
    parameter_file: parameters/aws_baseline/aws-landing-zone-default-okta-roles.json
    deploy_method: stack_set

dave-malone

[
  {
      "ParameterKey": "EnableAdminRole",
      "ParameterValue": "true"
  },
  {
      "ParameterKey": "EnablePowerUserRole",
      "ParameterValue": "true"
  },
  {

dave-malone

AWSTemplateFormatVersion: 2010-09-09
Description: Create Okta IDP and default roles on all accounts.

Metadata:
  AWS::CloudFormation::Interface:
    ParameterGroups:
      -
        Label:
          default: "Okta SAML IDP"
        Parameters:

dave-malone

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": [
          "arn:aws:iam::{account-id}:role/LandingZoneLambdaRoleADConnector",
          "arn:aws:iam::{account-id}:role/AWSCloudFormationStackSetAdministrationRole",
          "arn:aws:iam::{account-id}:role/StateMachineLambdaRoleADConnector",