> For the complete documentation index, see [llms.txt](https://help.aranet.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.aranet.com/base-stations/base-stations/integrations-and-3rd-party-systems/mqtt/mqtt-connection-configuration-with-amazon-aws-platform.md).

# MQTT connection configuration with Amazon AWS platform

Aranet PRO base station allows all sensor data publishing directly to AWS IoT Core, but the base must have firmware version at least 2.5.17. Check the firmware version in the graphical user interface section System FIRMWARE and update from https:[//aranet.com/downloads/](https://aranet.com/downloads/) if necessary.

{% stepper %}
{% step %}

### Access AWS IoT Core console

1. Open the AWS page <https://aws.amazon.com/> in a web browser and sign in to the Console.

<div data-with-frame="true"><figure><img src="/files/wFM9hxXX9IazPJ1oU8Pu" alt=""><figcaption></figcaption></figure></div>

2. In console search for IoT Core service.

<div data-with-frame="true"><figure><img src="/files/JnOIHTP3aDnELZd4cDcp" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}

### Create a policy for MQTT connect/publish/subscribe actions

1. In the main menu (left side in the IoT Core console) open Security Policies. \
   NOTE: A policy will be required later when a new thing will be created. This procedure must be performed once (to create
   &#x20;a policy) unless there is a reason to have multiple policies.

<div data-with-frame="true"><figure><img src="/files/9MB3CBLYAIg53oXXrZlP" alt=""><figcaption></figcaption></figure></div>

2. Create a new policy (press on Create policy).

<div data-with-frame="true"><figure><img src="/files/uVMIbObYhbY5PLb8cPst" alt=""><figcaption></figcaption></figure></div>

3. Enter the name for the policy.

<div data-with-frame="true"><figure><img src="/files/62C3PBurGFjTo1BuQROS" alt=""><figcaption></figcaption></figure></div>

4. In the Policy document enter following properties:

* Policy effect: Allow
* Policy action: select All IoT actions

<div data-with-frame="true"><figure><img src="/files/RjBIoxBcZWTsCtDtFU56" alt=""><figcaption></figcaption></figure></div>

* Policy resource: enter '\*'

<div data-with-frame="true"><figure><img src="/files/o38YlkQUkwpnLjob7TLX" alt=""><figcaption></figcaption></figure></div>

5. Press Create. A new policy which allows to perform all MQTT protocol actions on all MQTT topics has been created.

<div data-with-frame="true"><figure><img src="/files/ZEiAzW5byFElBXLsQxd5" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}

### Create a thing in the IoT Core

1. In the main menu (left side in the IoT Core console) open Manage Things.

<div data-with-frame="true"><figure><img src="/files/1CZmcZRkwMoNHOj0cpVm" alt=""><figcaption></figcaption></figure></div>

2. Press on Create things, then select Create single thing and press Next.

<div data-with-frame="true"><figure><img src="/files/qXp6Q5qX2WSYINAh5Rrr" alt=""><figcaption></figcaption></figure></div>

3. Enter the name for a thing.

<div data-with-frame="true"><figure><img src="/files/Wp3pKnfKxWsXVYnxPHPu" alt=""><figcaption></figcaption></figure></div>

4. For Device Shadow select No shadow.

<div data-with-frame="true"><figure><img src="/files/5Rrod0JlJQtHwm4lGX1e" alt=""><figcaption></figcaption></figure></div>

5. Device certificate: choose "Auto-generate a new certificate" and press Next.

<div data-with-frame="true"><figure><img src="/files/gmKrXL5QOHSnlcbvWmUI" alt=""><figcaption></figcaption></figure></div>

6. Select the policy which was created previously, and press Create thing.

<div data-with-frame="true"><figure><img src="/files/Cvrsj1uCNoOjeFnpgKTX" alt=""><figcaption></figcaption></figure></div>

7. Download the certificates and keys. These files will be required later for the Aranet PRO base station MQTT configuration. Download and rename the files accordingly:

* Download the Device certificate file and rename it as aranet-pro-base.crt

<div data-with-frame="true"><figure><img src="/files/iiujMwIAHIXqW0djyzxY" alt=""><figcaption></figcaption></figure></div>

* Download the Private key file and rename it as aranet-pro-base-private.key

<div data-with-frame="true"><figure><img src="/files/y5hl2hgT6eXzsGx7eEAI" alt=""><figcaption></figcaption></figure></div>

* Download the CA Root certificate file and rename it as aws-root-ca.crt

<div data-with-frame="true"><figure><img src="/files/8n9aK34cpOzyUVqnE9F5" alt=""><figcaption></figcaption></figure></div>

* As a result there must be three downloaded files:

<img src="/files/mD1QKEHB7ggp7daNzQVI" alt="" data-size="original">

* Also download the public key (it will not be required) and press Done. A new thing has been created.

<div data-with-frame="true"><figure><img src="/files/xSYixI2OIPnMtnPaTdht" alt=""><figcaption></figcaption></figure></div>
{% endstep %}
{% endstepper %}

### Configure Aranet PRO base station’s MQTT to connect to AWS IoT Core

NOTE: The following step will be used to determine what is the Host address to which the Aranet PRO bases station will
&#x20;connect to and the MQTT protocol version. In order to connect the Aranet Pro base station to AWS IoT Core using  MQTT, a thing must be created in AWS IoT Core service. Follow the steps described in create a thing in the IoT Core

* In AWS IoT Core main menu open Test ⇒ MQTT test client and press on Connection details.

<div data-with-frame="true"><figure><img src="/files/UNByzPYM5bnpy5q2ODuG" alt=""><figcaption></figcaption></figure></div>

* An Endpoint will be used for Host address (in the Aranet PRO base) and MQTT version for Protocol version accordingly.
* Go to the Aranet PRO base station MQTT configuration interface and set it up as shown:

<div data-with-frame="true"><figure><img src="/files/iw5JtuMa9wczS1gjl2MM" alt=""><figcaption></figcaption></figure></div>

Configuration entries:

1. Enable – enable the MQTT;
2. Host address – use Endpoint address from the previous section;
3. Port – enter 8883;
4. Protocol version – set MQTT version from the previous section (example: MQTT v5);
5. Keepalive – use 10;
6. Authentication — disabled;
7. QoS level – use 1;
8. Root topic – use "Aranet";
9. Sensor measurement format – use raw;
10. Encryption — Amazon AWS requires certificate validation. Use TLSv1.2

{% columns %}
{% column valign="middle" %}
a. Validate host certificate – enable to upload necessary secure connection certificates;

b.  use aws-root-ca.crt file saved from Am

azon AWS;

c. Supply client certificate — enable to upload the device public certificate and private key for a secure connection to the MQTT broker;

d. use aranet-pro-base-private.key file saved from Amazon AWS;

e.  use aranet-pro-base.crt file saved from Amazon AWS;
{% endcolumn %}

{% column valign="middle" %}

<div data-with-frame="true"><figure><img src="/files/skWXLJP8Il9OVmE3RsUR" alt=""><figcaption></figcaption></figure></div>
{% endcolumn %}
{% endcolumns %}

When all parameters are entered, save by pressing the blue Save icon. If the configured MQTT connection is successful, a "Connection successful" message will be shown on the top of the page with the time when the connection was established.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.aranet.com/base-stations/base-stations/integrations-and-3rd-party-systems/mqtt/mqtt-connection-configuration-with-amazon-aws-platform.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.