August 23, 2022 - Bosch IoT Things - service update

The latest deployment of Bosch IoT Things, the digital twin layer of Bosch IoT Device Management, comes with basic support on metadata.

A thing may optionally contain metadata information, e.g. about single feature properties, complete features and also attributes or other data stored in a digital twin (thing). This metadata can contain additionally information which shall not be treated as part of the twin’s value, however may be useful to provide some context of the twin’s data.

Metadata has not its own API but can only be updated/set while modifying the state of a twin as a side effect. By default, metadata is not returned at API requests, but must be asked for explicitly. See Eclipse Ditto documentation.

Metadata can also be included in the search index - see search fields.

At this occasion, various minor bugs have also been fixed.

August 15, 2022 - Bosch IoT Things - service update

The latest deployment of Bosch IoT Things, the digital twin layer of Bosch IoT Device Management, comes with a security fix/hardening.

Until last week, at the time of creating a thing, our services allowed to reference the new thing to an existing policy ID, even if the authorized subject would not have had any permission on the referenced policy.
As that behavior could result into a potential security leak, we have changed the logic, and now enforce that the authorized subject creating the new thing has at least READ permission on the referenced policy.

The potential leak has not been exploited so far.

However, in case your application would run into an error when creating things, please make sure that the authorized subject has at least READ permission on the policy as well.

At this occasion, various minor bugs have also been fixed.

Corporate information Data protection notice Legal information Support Free plans