AWS_ERROR_MQTT_UNEXPECTED_HANGUP: The connection was closed unexpectedly. when i run shadow.py from the samples

[nehoray-melamed]

• I have tried and tested everything that is written on these issues.
  1. Error : AWS_ERROR_MQTT_UNEXPECTED_HANGUP #110
  2.AWS_ERROR_MQTT_UNEXPECTED_HANGUP in sample mqtt/basic_pub_sub awslabs/aws-crt-cpp#96
  And I still get the error(in the title).

• I try to run the shadow.py (from this sample 'https://github.com/aws/aws-iot-device-sdk-python-v2/tree/main/samples' ),
  like that
  python3 shadow.py --endpoint "xxxxxxx-ats.iot.eu-central-1.amazonaws.com" --root-ca /Users/sec/root_ca.pem --cert /Users/sec/cer.pem --key /Users/sec/private_key.pem --thing-name "myThingName"

• I also tried different format for the files (.key .pem .crt)
  The thing is exists and has an activate certificate and the endpoint is rigth

• The full error:
  awscrt.exceptions.AwsCrtError: AWS_ERROR_MQTT_UNEXPECTED_HANGUP: The connection was closed unexpectedly.

10x!!!

[jmklix]

What is the policy for the IoT thing?

You can use a fully permissive policy or copy the one below:

{
  "Version": "2012-10-17",
  "Statement": [

{
  "Effect": "Allow",
  "Action": [
    "iot:Publish"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update"
  ]
},
{
  "Effect": "Allow",
  "Action": [
    "iot:Receive"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/delta"
  ]
},
{
  "Effect": "Allow",
  "Action": [
    "iot:Subscribe"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/get/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/get/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/delta"
  ]
},
{
  "Effect": "Allow",
  "Action": "iot:Connect",
  "Resource": "arn:aws:iot:<b>region</b>:<b>account</b>:client/test-*"
}


]
}

[nehoray-melamed]

Hi thank you !

But i already have a fully permissive policy.

What is the policy for the IoT thing?

You can use a fully permissive policy or copy the one below:

{
  "Version": "2012-10-17",
  "Statement": [

{
  "Effect": "Allow",
  "Action": [
    "iot:Publish"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update"
  ]
},
{
  "Effect": "Allow",
  "Action": [
    "iot:Receive"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/get/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topic/$aws/things/<b>thingname</b>/shadow/update/delta"
  ]
},
{
  "Effect": "Allow",
  "Action": [
    "iot:Subscribe"
  ],
  "Resource": [
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/get/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/get/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/accepted",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/rejected",
    "arn:aws:iot:<b>region</b>:<b>account</b>:topicfilter/$aws/things/<b>thingname</b>/shadow/update/delta"
  ]
},
{
  "Effect": "Allow",
  "Action": "iot:Connect",
  "Resource": "arn:aws:iot:<b>region</b>:<b>account</b>:client/test-*"
}


]
}

Hi
thank you!
But I have a fully permissive policy

[jmklix]

Are you trying to do this with the python sdk? If so you can you please open a new issue there and include the OS and the python version.

If you are trying to use this c++ sdk your running command should look more like this for OSX or Linux:

./shadow-sync --endpoint "xxxxxxx-ats.iot.eu-central-1.amazonaws.com" \
 --root-ca /Users/sec/root_ca.pem \
 --cert /Users/sec/cer.pem \
 --key /Users/sec/private_key.pem \
 --thing_name "myThingName" \
 --shadow_property "color"

Or this for Windows

./shadow-sync.exe --endpoint "xxxxxxx-ats.iot.eu-central-1.amazonaws.com" \
 --root-ca /Users/sec/root_ca.pem \
 --cert /Users/sec/cer.pem \
 --key /Users/sec/private_key.pem \
 --thing_name "myThingName" \
 --shadow_property "color"

Can you include your cmake version and OS?

[github-actions]

Greetings! It looks like this issue hasn’t been active in longer than a week. We encourage you to check if this is still an issue in the latest release. Because it has been longer than a week since the last update on this, and in the absence of more information, we will be closing this issue soon. If you find that this is still a problem, please feel free to provide a comment or add an upvote to prevent automatic closure, or if the issue is already closed, please feel free to open a new one.