AWS IoT

naftiko: 1.0.0-alpha2
info:
  label: AWS IoT
  description: 'AWS IoT. 238 operations. Lead operation: Amazon IoT Device Management Accept Certificate Transfer. Self-contained
    Naftiko capability covering one Amazon Iot Device Management business surface.'
  tags:
  - Amazon Iot Device Management
  - AWS IoT
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AMAZON_IOT_DEVICE_MANAGEMENT_API_KEY: AMAZON_IOT_DEVICE_MANAGEMENT_API_KEY
capability:
  consumes:
  - type: http
    namespace: amazon-iot-device-management
    baseUri: http://iot.{region}.amazonaws.com
    description: AWS IoT business capability. Self-contained, no shared references.
    resources:
    - name: accept-certificate-transfer-certificateId
      path: /accept-certificate-transfer/{certificateId}
      operations:
      - name: acceptcertificatetransfer
        method: PATCH
        description: Amazon IoT Device Management Accept Certificate Transfer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: certificateId
          in: path
          type: string
          description: The ID of the certificate. (The last part of the certificate ARN contains the certificate ID.)
          required: true
        - name: setAsActive
          in: query
          type: boolean
          description: Specifies whether the certificate is active.
    - name: active-violations
      path: /active-violations
      operations:
      - name: listactiveviolations
        method: GET
        description: Amazon IoT Device Management List Active Violations
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: thingName
          in: query
          type: string
          description: The name of the thing whose active violations are listed.
        - name: securityProfileName
          in: query
          type: string
          description: The name of the Device Defender security profile for which violations are listed.
        - name: behaviorCriteriaType
          in: query
          type: string
          description: The criteria for a behavior.
        - name: listSuppressedAlerts
          in: query
          type: boolean
          description: A list of all suppressed alerts.
        - name: verificationState
          in: query
          type: string
          description: The verification state of the violation (detect alarm).
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time.
    - name: attached-policies-target
      path: /attached-policies/{target}
      operations:
      - name: listattachedpolicies
        method: POST
        description: Amazon IoT Device Management List Attached Policies
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: target
          in: path
          type: string
          description: The group or principal for which the policies will be listed. Valid principals are CertificateArn (arn:aws:iot:<i>region</i>:<i>accountId</i>:cert/<i>certificat
          required: true
        - name: recursive
          in: query
          type: boolean
          description: When true, recursively list attached policies.
        - name: marker
          in: query
          type: string
          description: The token to retrieve the next set of results.
        - name: pageSize
          in: query
          type: integer
          description: The maximum number of results to be returned per request.
    - name: audit-configuration
      path: /audit/configuration
      operations:
      - name: deleteaccountauditconfiguration
        method: DELETE
        description: Amazon IoT Device Management Delete Account Audit Configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: deleteScheduledAudits
          in: query
          type: boolean
          description: If true, all scheduled audits are deleted.
      - name: describeaccountauditconfiguration
        method: GET
        description: Amazon IoT Device Management Describe Account Audit Configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateaccountauditconfiguration
        method: PATCH
        description: Amazon IoT Device Management Update Account Audit Configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-findings
      path: /audit/findings
      operations:
      - name: listauditfindings
        method: POST
        description: Amazon IoT Device Management List Audit Findings
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: maxResults
          in: query
          type: string
          description: Pagination limit
        - name: nextToken
          in: query
          type: string
          description: Pagination token
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-findings-findingId
      path: /audit/findings/{findingId}
      operations:
      - name: describeauditfinding
        method: GET
        description: Amazon IoT Device Management Describe Audit Finding
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: findingId
          in: path
          type: string
          description: A unique identifier for a single audit finding. You can use this identifier to apply mitigation actions
            to the finding.
          required: true
    - name: audit-mitigationactions-executions#taskId&findingId
      path: /audit/mitigationactions/executions#taskId&findingId
      operations:
      - name: listauditmitigationactionsexecutions
        method: GET
        description: Amazon IoT Device Management List Audit Mitigation Actions Executions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: query
          type: string
          description: Specify this filter to limit results to actions for a specific audit mitigation actions task.
          required: true
        - name: actionStatus
          in: query
          type: string
          description: Specify this filter to limit results to those with a specific status.
        - name: findingId
          in: query
          type: string
          description: Specify this filter to limit results to those that were applied to a specific audit finding.
          required: true
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time. The default is 25.
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
    - name: audit-mitigationactions-tasks#startTime&endTime
      path: /audit/mitigationactions/tasks#startTime&endTime
      operations:
      - name: listauditmitigationactionstasks
        method: GET
        description: Amazon IoT Device Management List Audit Mitigation Actions Tasks
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: auditTaskId
          in: query
          type: string
          description: Specify this filter to limit results to tasks that were applied to results for a specific audit.
        - name: findingId
          in: query
          type: string
          description: Specify this filter to limit results to tasks that were applied to a specific audit finding.
        - name: taskStatus
          in: query
          type: string
          description: Specify this filter to limit results to tasks that are in a specific state.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time. The default is 25.
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
        - name: startTime
          in: query
          type: string
          description: Specify this filter to limit results to tasks that began on or after a specific date and time.
          required: true
        - name: endTime
          in: query
          type: string
          description: Specify this filter to limit results to tasks that were completed or canceled on or before a specific
            date and time.
          required: true
    - name: audit-mitigationactions-tasks-taskId
      path: /audit/mitigationactions/tasks/{taskId}
      operations:
      - name: describeauditmitigationactionstask
        method: GET
        description: Amazon IoT Device Management Describe Audit Mitigation Actions Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: path
          type: string
          description: The unique identifier for the audit mitigation task.
          required: true
      - name: startauditmitigationactionstask
        method: POST
        description: Amazon IoT Device Management Start Audit Mitigation Actions Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: path
          type: string
          description: A unique identifier for the task. You can use this identifier to check the status of the task or to
            cancel it.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-mitigationactions-tasks-taskId-cancel
      path: /audit/mitigationactions/tasks/{taskId}/cancel
      operations:
      - name: cancelauditmitigationactionstask
        method: PUT
        description: Amazon IoT Device Management Cancel Audit Mitigation Actions Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: path
          type: string
          description: The unique identifier for the task that you want to cancel.
          required: true
    - name: audit-relatedResources#findingId
      path: /audit/relatedResources#findingId
      operations:
      - name: listrelatedresourcesforauditfinding
        method: GET
        description: Amazon IoT Device Management List Related Resources for Audit Finding
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: findingId
          in: query
          type: string
          description: The finding Id.
          required: true
        - name: nextToken
          in: query
          type: string
          description: A token that can be used to retrieve the next set of results, or <code>null</code> if there are no
            additional results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time.
    - name: audit-scheduledaudits
      path: /audit/scheduledaudits
      operations:
      - name: listscheduledaudits
        method: GET
        description: Amazon IoT Device Management List Scheduled Audits
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time. The default is 25.
    - name: audit-scheduledaudits-scheduledAuditName
      path: /audit/scheduledaudits/{scheduledAuditName}
      operations:
      - name: createscheduledaudit
        method: POST
        description: Amazon IoT Device Management Create Scheduled Audit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: scheduledAuditName
          in: path
          type: string
          description: The name you want to give to the scheduled audit. (Max. 128 chars)
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletescheduledaudit
        method: DELETE
        description: Amazon IoT Device Management Delete Scheduled Audit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: scheduledAuditName
          in: path
          type: string
          description: The name of the scheduled audit you want to delete.
          required: true
      - name: describescheduledaudit
        method: GET
        description: Amazon IoT Device Management Describe Scheduled Audit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: scheduledAuditName
          in: path
          type: string
          description: The name of the scheduled audit whose information you want to get.
          required: true
      - name: updatescheduledaudit
        method: PATCH
        description: Amazon IoT Device Management Update Scheduled Audit
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: scheduledAuditName
          in: path
          type: string
          description: The name of the scheduled audit. (Max. 128 chars)
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-suppressions-create
      path: /audit/suppressions/create
      operations:
      - name: createauditsuppression
        method: POST
        description: Amazon IoT Device Management Create Audit Suppression
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-suppressions-delete
      path: /audit/suppressions/delete
      operations:
      - name: deleteauditsuppression
        method: POST
        description: Amazon IoT Device Management Delete Audit Suppression
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-suppressions-describe
      path: /audit/suppressions/describe
      operations:
      - name: describeauditsuppression
        method: POST
        description: Amazon IoT Device Management Describe Audit Suppression
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-suppressions-list
      path: /audit/suppressions/list
      operations:
      - name: listauditsuppressions
        method: POST
        description: Amazon IoT Device Management List Audit Suppressions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: maxResults
          in: query
          type: string
          description: Pagination limit
        - name: nextToken
          in: query
          type: string
          description: Pagination token
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-suppressions-update
      path: /audit/suppressions/update
      operations:
      - name: updateauditsuppression
        method: PATCH
        description: Amazon IoT Device Management Update Audit Suppression
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-tasks
      path: /audit/tasks
      operations:
      - name: startondemandaudittask
        method: POST
        description: Amazon IoT Device Management Start on Demand Audit Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: audit-tasks#startTime&endTime
      path: /audit/tasks#startTime&endTime
      operations:
      - name: listaudittasks
        method: GET
        description: Amazon IoT Device Management List Audit Tasks
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: startTime
          in: query
          type: string
          description: The beginning of the time period. Audit information is retained for a limited time (90 days). Requesting
            a start time prior to what is retained results in an "I
          required: true
        - name: endTime
          in: query
          type: string
          description: The end of the time period.
          required: true
        - name: taskType
          in: query
          type: string
          description: 'A filter to limit the output to the specified type of audit: can be one of "ON_DEMAND_AUDIT_TASK"
            or "SCHEDULED__AUDIT_TASK".'
        - name: taskStatus
          in: query
          type: string
          description: 'A filter to limit the output to audits with the specified completion status: can be one of "IN_PROGRESS",
            "COMPLETED", "FAILED", or "CANCELED".'
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time. The default is 25.
    - name: audit-tasks-taskId
      path: /audit/tasks/{taskId}
      operations:
      - name: describeaudittask
        method: GET
        description: Amazon IoT Device Management Describe Audit Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: path
          type: string
          description: The ID of the audit whose information you want to get.
          required: true
    - name: audit-tasks-taskId-cancel
      path: /audit/tasks/{taskId}/cancel
      operations:
      - name: cancelaudittask
        method: PUT
        description: Amazon IoT Device Management Cancel Audit Task
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: taskId
          in: path
          type: string
          description: The ID of the audit you want to cancel. You can only cancel an audit that is "IN_PROGRESS".
          required: true
    - name: authorizer-authorizerName
      path: /authorizer/{authorizerName}
      operations:
      - name: createauthorizer
        method: POST
        description: Amazon IoT Device Management Create Authorizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authorizerName
          in: path
          type: string
          description: The authorizer name.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteauthorizer
        method: DELETE
        description: Amazon IoT Device Management Delete Authorizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authorizerName
          in: path
          type: string
          description: The name of the authorizer to delete.
          required: true
      - name: describeauthorizer
        method: GET
        description: Amazon IoT Device Management Describe Authorizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authorizerName
          in: path
          type: string
          description: The name of the authorizer to describe.
          required: true
      - name: updateauthorizer
        method: PUT
        description: Amazon IoT Device Management Update Authorizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authorizerName
          in: path
          type: string
          description: The authorizer name.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: authorizer-authorizerName-test
      path: /authorizer/{authorizerName}/test
      operations:
      - name: testinvokeauthorizer
        method: POST
        description: Amazon IoT Device Management Test Invoke Authorizer
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authorizerName
          in: path
          type: string
          description: The custom authorizer name.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: authorizers
      path: /authorizers/
      operations:
      - name: listauthorizers
        method: GET
        description: Amazon IoT Device Management List Authorizers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: pageSize
          in: query
          type: integer
          description: The maximum number of results to return at one time.
        - name: marker
          in: query
          type: string
          description: A marker used to get the next set of results.
        - name: isAscendingOrder
          in: query
          type: boolean
          description: Return the list of authorizers in ascending alphabetical order.
        - name: status
          in: query
          type: string
          description: The status of the list authorizers request.
    - name: behavior-model-training-summaries
      path: /behavior-model-training/summaries
      operations:
      - name: getbehaviormodeltrainingsummaries
        method: GET
        description: Amazon IoT Device Management Get Behavior Model Training Summaries
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: securityProfileName
          in: query
          type: string
          description: The name of the security profile.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return at one time. The default is 10.
        - name: nextToken
          in: query
          type: string
          description: The token for the next set of results.
    - name: billing-groups
      path: /billing-groups
      operations:
      - name: listbillinggroups
        method: GET
        description: Amazon IoT Device Management List Billing Groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: nextToken
          in: query
          type: string
          description: To retrieve the next set of results, the <code>nextToken</code> value from a previous response; otherwise
            <b>null</b> to receive the first set of results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return per request.
        - name: namePrefixFilter
          in: query
          type: string
          description: Limit the results to billing groups whose names have the given prefix.
    - name: billing-groups-addThingToBillingGroup
      path: /billing-groups/addThingToBillingGroup
      operations:
      - name: addthingtobillinggroup
        method: PUT
        description: Amazon IoT Device Management Add Thing to Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: billing-groups-removeThingFromBillingGroup
      path: /billing-groups/removeThingFromBillingGroup
      operations:
      - name: removethingfrombillinggroup
        method: PUT
        description: Amazon IoT Device Management Remove Thing from Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: billing-groups-billingGroupName
      path: /billing-groups/{billingGroupName}
      operations:
      - name: createbillinggroup
        method: POST
        description: Amazon IoT Device Management Create Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: billingGroupName
          in: path
          type: string
          description: The name you wish to give to the billing group.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletebillinggroup
        method: DELETE
        description: Amazon IoT Device Management Delete Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: billingGroupName
          in: path
          type: string
          description: The name of the billing group.
          required: true
        - name: expectedVersion
          in: query
          type: integer
          description: The expected version of the billing group. If the version of the billing group does not match the expected
            version specified in the request, the <code>DeleteBil
      - name: describebillinggroup
        method: GET
        description: Amazon IoT Device Management Describe Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: billingGroupName
          in: path
          type: string
          description: The name of the billing group.
          required: true
      - name: updatebillinggroup
        method: PATCH
        description: Amazon IoT Device Management Update Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: billingGroupName
          in: path
          type: string
          description: The name of the billing group.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: billing-groups-billingGroupName-things
      path: /billing-groups/{billingGroupName}/things
      operations:
      - name: listthingsinbillinggroup
        method: GET
        description: Amazon IoT Device Management List Things in Billing Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: billingGroupName
          in: path
          type: string
          description: The name of the billing group.
          required: true
        - name: nextToken
          in: query
          type: string
          description: To retrieve the next set of results, the <code>nextToken</code> value from a previous response; otherwise
            <b>null</b> to receive the first set of results.
        - name: maxResults
          in: query
          type: integer
          description: The maximum number of results to return per request.
    - name: cacertificate
      path: /cacertificate
      operations:
      - name: registercacertificate
        method: POST
        description: Amazon IoT Device Management Register C a Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: setAsActive
          in: query
          type: boolean
          description: '<p>A boolean value that specifies if the CA certificate is set to active.</p> <p>Valid values: <code>ACTIVE
            | INACTIVE</code> </p>'
        - name: allowAutoRegistration
          in: query
          type: boolean
          description: Allows this CA certificate to be used for auto registration of device certificates.
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: cacertificate-caCertificateId
      path: /cacertificate/{caCertificateId}
      operations:
      - name: deletecacertificate
        method: DELETE
        description: Amazon IoT Device Management Delete C a Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: caCertificateId
          in: path
          type: string
          description: The ID of the certificate to delete. (The last part of the certificate ARN contains the certificate
            ID.)
          required: true
      - name: describecacertificate
        method: GET
        description: Amazon IoT Device Management Describe C a Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: ca

# --- truncated at 32 KB (364 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-iot-device-management/refs/heads/main/capabilities/amazon-iot-device-management.yaml