AWS iot-sitewise medium security documentation change

Service: iot-sitewise · 2025-06-13 · Security-related medium

File: iot-sitewise/latest/userguide/connect-app-to-broker.md

Summary

Updated certificate retrieval commands to use dedicated CLI tool instead of direct file access, added instructions for saving certificate to a file

Security assessment

The change replaces direct file access with a CLI tool that ensures proper certificate handling, reducing risks of incorrect paths or manual file access errors. The CLI's automatic path resolution improves security by enforcing consistent certificate management.

Diff

diff --git a/iot-sitewise/latest/userguide/connect-app-to-broker.md b/iot-sitewise/latest/userguide/connect-app-to-broker.md
index 5578a74da..1523d89a9 100644
--- a//iot-sitewise/latest/userguide/connect-app-to-broker.md
+++ b//iot-sitewise/latest/userguide/connect-app-to-broker.md
@@ -38 +38,8 @@ Run the following command in a shell session on the gateway host:
-    cat /greengrass/v2/work/aws.greengrass.clientdevices.Auth/ca.pem
+    /greengrass/v2/bin/swe-emqx-cli cert
+
+This command displays the certificate location and prints the certificate's content.
+
+You can alternatively save the certificate to a file using this command:
+    
+    
+    /greengrass/v2/bin/swe-emqx-cli cert --output /path/to/certificate.pem
@@ -46 +53,10 @@ Run the following command in a PowerShell session on the gateway host:
-    Get-Content C:\greengrass\v2\work\aws.greengrass.clientdevices.Auth\ca.pem
+    C:\greengrass\v2\bin\swe-emqx-cli.ps1 cert
+
+This command displays the certificate location and prints the certificate's content.
+
+You can alternatively save the certificate to a file using this command:
+    
+    
+    C:\greengrass\v2\bin\swe-emqx-cli.ps1 cert --output C:\path\to\certificate.pem
+
+The CLI automatically locates the certificate regardless of the exact path on your system.