How do I use AWS Cognito Authenticated Authentication to access my AWS IoT endpoint?

Question

I use the MQTT client in JavaScript (paho-mqtt-js) to connect to the AWS IoT endpoint, and I can connect if I use my own AWS credentials.

However, if I use the credentials generated by Cognito for the registered user, I cannot do this. My authorized Cognito role in IAM has an "AWSIoTFullAccess" policy associated with it, so I'm confused about why these credentials return a 403 error every time.

Any help regarding this would be greatly appreciated.

Answer 1

A similar issue has been discovered when working with federated identity. Some troubleshooting tips:

• Please use cloudwatch logs to find out which problems were very convenient.
• Also look at cloud browsing logs with a topic name ending in _CognitoIdentityCredentials
• Using appropriate session tokens
• Use the AWS CLI and run the attach-main-policy command to try manually.
• Refer to this link https://github.com/alfonsodev/aws-iot-example/blob/master/index.js to run locally using nodejs to fix this problem.
• Please use the basic affiliate policy. This link http://techqa.info/programming/question/40301345/connect-to-AWS-IoT-using-web-socket-with-Cognito-authenticated-users was very useful for integration

Hope this helps!