关于SIM 800模块通过HTTP与AWS IoT及API网关交互的问题咨询

Got it, let's walk through how to get your SIM800 module talking to AWS IoT over HTTP with proper certificate setup—since you already have SSL working for other sites, you're halfway there! Here's a step-by-step configuration plan tailored to your use case:

1. Prepare AWS IoT Credentials & Endpoint #

First, you'll need to set up your AWS IoT resources properly:

• Create a Thing: In the AWS IoT Console, create a new Thing to represent your SIM800 device.
• Download Certificates: Generate and save three critical files (all in PEM format):
  • Device certificate
  • Private key
  • Amazon Root CA 1 (available directly from the AWS IoT certificate management section)
• Activate the Certificate: Don’t skip this! You need to mark the device certificate as active in the console for it to work.
• Attach a Permissions Policy: Create an IoT policy that grants your device access to interact with its shadow (adjust actions based on your needs):

  {
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "iot:GetThingShadow",
          "iot:UpdateThingShadow"
        ],
        "Resource": "arn:aws:iot:<your-region>:<your-account-id>:thing/<your-thing-name>"
      }
    ]
  }
  

  Attach this policy to your device certificate to authorize access.

2. Import Certificates to SIM800 Module #

SIM800 uses AT commands to load SSL certificates for mutual TLS authentication. Before importing, remove all newline characters from your certificate files—this ensures the AT command parses the content correctly.

Load Root CA Certificate #

AT+CSSLCFG="sslca",0,"-----BEGIN CERTIFICATE-----<your-root-ca-content>-----END CERTIFICATE-----"

Wait for an OK response before proceeding.

Load Device Certificate #

AT+CSSLCFG="clientcert",0,"-----BEGIN CERTIFICATE-----<your-device-cert-content>-----END CERTIFICATE-----"

Load Private Key #

AT+CSSLCFG="clientkey",0,"-----BEGIN RSA PRIVATE KEY-----<your-private-key-content>-----END RSA PRIVATE KEY-----"

3. Test HTTP GET from AWS IoT #

Let’s fetch your device’s shadow data with a GET request:

1. Initialize the HTTP service:

   AT+HTTPINIT
   

2. Enable SSL (you already know this step!):

   AT+HTTPSSL=1
   

3. Set your AWS IoT endpoint and shadow URL:

   AT+HTTPPARA="URL","https://<your-iot-endpoint>.iot.<your-region>.amazonaws.com/things/<your-thing-name>/shadow"
   

4. Specify JSON content type:

   AT+HTTPPARA="CONTENT","application/json"
   

5. Execute the GET request:

   AT+HTTPACTION=0
   

   Wait for a response like +HTTPACTION:0,200,<length> (200 means success).
6. Read the returned JSON data:

   AT+HTTPREAD
   

4. Test HTTP POST to AWS IoT #

To send JSON data (like updating your device’s reported state):

1. Repeat steps 1-4 from the GET test.
2. Declare your payload length and prepare to send data:

   AT+HTTPDATA=<payload-length>,10000
   

   Replace <payload-length> with the character count of your JSON (e.g., 50 for {"state":{"reported":{"temp":25}}}). The 10000 is a 10-second timeout.
3. After seeing the > prompt, paste your JSON payload:

   {"state":{"reported":{"temperature":25,"humidity":60}}}
   

4. Execute the POST request:

   AT+HTTPACTION=1
   

5. Verify success by reading the response:

   AT+HTTPREAD
   

Key Tips to Avoid Headaches #

• Firmware Check: Ensure your SIM800 runs a recent firmware version—older builds may have bugs with client certificate authentication.
• Terminal Tool: Use a serial terminal that supports pasting long strings (like TeraTerm or PuTTY) to avoid errors when importing certificates.
• Policy Validation: Double-check your IoT policy to confirm it includes the exact actions and resources your device needs (missing permissions are a common pitfall).

Once everything’s configured, your SIM800 should reliably send and receive JSON data to AWS IoT over HTTP using SSL certificate authentication.

内容的提问来源于stack exchange，提问作者Xavier Gonsalves