Bosch IoT Device Management

Auth for forwarding device data via connections

The connections from the connectivity layer to the digital twin layer and from the digital twin layer to the device management layer are managed within the Things service.

As soon as your subscription is successful, the connections are already set up.

You can read the default settings (or change the settings if needed) via the Connections UI.

images/confluence/download/attachments/1634790205/connections-ui.png

Device integration: forwarding device data from Bosch IoT Hub to Bosch IoT Things

The pre-configured connection is called "Devices via Bosch IoT Hub".

When your device will later try to send its data to Bosch IoT Hub, the data will be forwarded to Bosch IoT Things respectively, based on the authorization subject of the connection sources.
By default, the subject within the connection is created automatically, and follows the pattern:
integration:<your-things-solution-id>:hub.
In order to authorize a change (e.g. set new sensor measured value as a feature property value) the things policy is applied. Thus, please note, that the authorization subject in the connection sources will additionally need write permission in terms of the thing policy.

For an update (put) thing request, write thing permissions should be sufficient. However, with read and write you will be on the safe site for such a scenario (because write does not implicitly include read permission).

Device integration: forwarding device data from Bosch IoT Things to Bosch IoT Manager

The pre-configured connection is called "Device Management".

When your device will later try to send its data, it will be forwarded to Bosch IoT Manager respectively, based on the authorization subject of the connection targets.

By default, the subject within the connection is created automatically, and follows the pattern:
integration:<your-things-solution-id>:iot-manager

The Apache Kafka connection is uni-directional, thus the Manager service cannot send changes back to Things, but only get data.