Simple setup to onboard and operate devices

Use the create-credential-locker command. Executing this command will trigger the creation of all manufacturing resources including the Wi-Fi setup key pair and device certificate.

create-credential-locker example

aws iot-managed-integrations create-credential-locker \
  --name "DEVICE_NAME"

Response:

{    
  "Id": "LOCKER_ID"
  "Arn": "arn:aws:iotmanagedintegrations:AWS_REGION:AWS_ACCOUNT_ID:credential-locker/LOCKER_ID
  "CreatedAt": "2025-06-09T13:58:52.977000+08:00"
}

For more information, see the create-credential-locker command in the managed integrations AWS CLI Command Reference.

Use the following command to add a credential locker to your hub.

aws iotmi --region AWS_REGION --endpoint AWS_ENDPOINT update-managed-thing \
--identifier "HUB_MANAGED_THING_ID" --credential-locker-id "LOCKER_ID"

Use the create-managed-thing command to create a managed thing for your device.

create-managed-thing example

#ZWAVE: 
aws iot-managed-integrations create-managed-thing --role DEVICE \
--authentication-material '900137947003133...' \ #auth material from zwave qr code
--authentication-material-type ZWAVE_QR_BAR_CODE \
--credential-locker-id ${locker_id}

#ZIGBEE:
aws iot-managed-integrations create-managed-thing --role DEVICE \
--authentication-material 'Z:286...$I:A4DC00.' \ #auth material from zigbee qr code
--authentication-material-type ZIGBEE_QR_BAR_CODE \
--credential-locker-id ${locker_id}

Response:

{    
  "Id": "DEVICE_MANAGED_THING_ID"
  "Arn": "arn:aws:iotmanagedintegrations:AWS_REGION:AWS_ACCOUNT_ID:managed-thing/DEVICE_MANAGED_THING_ID"
  "CreatedAt": "2025-06-09T13:58:52.977000+08:00"
}

For more information, see the create-managed-thing command in the managed integrations AWS CLI Command Reference.

Use the get-managed-thing command to check your device's status. The ProvisioningStatus of your managed thing must be ACTIVATED. For more information on ProvisioningStatus, see Device Provisioning.

get-managed-thing example

#KINESIS NOTIFICATION:
{
    "version": "1.0.0",
    "messageId": "4ac684bb7f4c41adbb2eecc1e7991xxx",
    "messageType": "DEVICE_LIFE_CYCLE",
    "source": "aws.iotmanagedintegrations",
    "customerAccountId": "12345678901",
    "timestamp": "2025-06-10T05:30:59.852659650Z",
    "region": "us-east-1",
    "resources": ["XXX"],
    "payload": {
        "deviceDetails": {
            "id": "1e84f61fa79a41219534b6fd57052XXX",
            "arn": "XXX",
            "createdAt": "2025-06-09T06:24:34.336120179Z",
            "updatedAt": "2025-06-10T05:30:59.784157019Z"
        },
        "status": "ACTIVATED"
    }
}
aws iot-managed-integrations get-managed-thing \
--identifier :"DEVICE_MANAGED_THING_ID"

Response:

{    
  "Id": "DEVICE_MANAGED_THING_ID"
  "Arn": "arn:aws:iotmanagedintegrations:AWS_REGION:AWS_ACCOUNT_ID:managed-thing/MANAGED_THING_ID"
  "CreatedAt": "2025-06-09T13:58:52.977000+08:00"
}

For more information, see the get-managed-thing command in the managed integrations AWS CLI Command Reference.

Use the get-managed-thing-capabilities command and note the endpoint ID.

get-managed-thing-capabilties example

aws iotmi get-managed-thing-capabilities \
--identifier "DEVICE_MANAGED_THING_ID"

Response:

{    
    "ManagedThingId": "1e84f61fa79a41219534b6fd57052cbc",
    "CapabilityReport": {
        "version": "1.0.0",
        "nodeId": "zw.FCB10009+06",
        "endpoints": [
            {
                "id": "ENDPOINT_ID"
                "deviceTypes": [
                    "On/Off Switch"
                ],
                "capabilities": [
                    {
                        "id": "matter.OnOff@1.4",
                        "name": "On/Off",
                        "version": "6",
                        "properties": [
                            "OnOff"
                        ],
                        "actions": [
                            "Off",
                            "On"
                        ],
                        "events": []
                    }
                    ...
}

For more information, see the get-managed-thing-capabilities command in the managed integrations AWS CLI Command Reference.

Use the send-managed-thing-command command to send a command to your managed thing.

send-managed-thing-command example

json=$(jq -cr '.|@json') <<EOF
[
  {
    "endpointId": "1",
    "capabilities": [
      {
        "id": "matter.OnOff@1.4",
        "name": "On/Off",
        "version": "1",
        "actions": [
          {
            "name": "Toggle",
            "parameters": {}
          }
        ]
      }
    ]
  }
]
EOF
aws iot-managed-integrations send-managed-thing-command \
--managed-thing-id "DEVICE_MANAGED_THING_ID" --endpoints "ENDPOINT_ID"
          

Response:

{    
"TraceId": "TRACE_ID"
}

For more information, see the send-managed-thing-command command in the managed integrations AWS CLI Command Reference.

Use the delete-managed-thing command to remove a managed thing from your device hub.

delete-managed-thing example

aws iot-managed-integrations delete-managed-thing \
--identifier "DEVICE_MANAGED_THING_ID"

For more information, see the delete-managed-thing command in the managed integrations AWS CLI Command Reference.