自分だけ開ける「スマート宝箱」を作って、大事なモノをセキュアに保管してみた

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "iot:Connect",
        "iot:Publish",
        "iot:Subscribe",
        "iot:Receive"
      ],
      "Resource": [
        "*"
      ]
    }
  ]
}

...
#define clientcredentialMQTT_BROKER_ENDPOINT "ここにエンドポイントの URL をコピー"
...
#define clientcredentialIOT_THING_NAME       "ここにモノの名前を入力 (例 : PersonalBox-001))"
...
#define clientcredentialWIFI_SSID            "ここに Wi-Fi の SSID を入力"
...
#define clientcredentialWIFI_PASSWORD        "に Wi-Fi のパスワードを入力"
...
#define clientcredentialWIFI_SECURITY        eWiFiSecurityWPA2
...

{
  "desired": {
    "lockState": 0
  },
  "reported": {
    "lockState": 0
  }
}

{
  "desired": {
    "lockState": 1
  },
  "reported": {
    "lockState": 0
  },
  "delta": {
    "lockState": 1
  }
}

{
  "desired": {
    "lockState": 1
  },
  "reported": {
    "lockState": 1
  },
}

{
  "desired": {
    "lockState": 0
  },
  "reported": {
    "lockState": 0
  },
}

static void prvUnLockTask(void * pvParameters)
{
    // Used for the screen.
    char pUnLockStr[16] = {0};
    char * pThingName = (char *)pvParameters;

    ESP_LOGI(TAG, "prvUnLockTask: Starting the UnLock task for: %s", pThingName);

    for(;;)
    {        
        if(ulTaskNotifyTake(pdTRUE, portMAX_DELAY) >0){
            int status = EXIT_SUCCESS;

            if (shadowStateReported.lockState == 1){
                UNLOCK();
                vTaskDelay(pdMS_TO_TICKS(200));
                LOCK();
                status = snprintf(pUnLockStr, sizeof(pUnLockStr), "Lock: Open");
                shadowStateReported.lockState = 0;
                shadowStateDesired.lockState = 0;
            }else{
                LOCK();
                status = snprintf(pUnLockStr, sizeof(pUnLockStr), "Lock: Close");
            }

            if (status >= 0)
            {
                TFT_print(pUnLockStr, CENTER, 49);
            }
            
            /* Report Shadow. */
            status = _reportShadow(pThingName);
            if (status != EXIT_SUCCESS)
            {
                ESP_LOGE(TAG, "prvUnLockTask: Failed to report the shadow.");
            }

            /* Update Desired. */
            status = _desiredShadow(pThingName);
            if (status != EXIT_SUCCESS)
            {
                ESP_LOGE(TAG, "prvUnLockTask: Failed to report the shadow.");
            }

            vTaskDelay(pdMS_TO_TICKS(100));
        }
    }
}

# install homebrew, npm, amplify-cli
ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
brew install node
 npm install -g @aws-amplify/cli

apply *plugin*: *'com.amplifyframework.amplifytools'

*amplify init*
*amplify add api*
? Please select from one of the below mentioned services: GraphQL
? Provide API name: personalbox
? Choose the default authorization type for the API Amazon Cognito User Pool
Use a Cognito user pool configured as a part of this project.
? Do you want to configure advanced settings for the GraphQL API Yes, I want to make some additional changes.
? Configure additional auth types? Yes
? Choose the additional authorization types you want to configure for the API IAM
? Configure conflict detection? No
? Do you have an annotated GraphQL schema? No
? Choose a schema template: Single object with fields (e.g., “Todo” with ID, name, description)
? Do you want to edit the schema now? No

* amplify push*
✔ Successfully pulled backend environment dev from the cloud.

Current Environment: dev

| Category | Resource name       | Operation | Provider plugin   |
| -------- | ------------------- | --------- | ----------------- |
| Auth     | personalbox155c4a4a | Create    | awscloudformation |
| Api      | personalbox         | Create    | awscloudformation |
? Are you sure you want to continue? Yes

GraphQL schema compiled successfully.

Edit your schema at /Users/tatsiida/AndroidStudioProjects/PersonalBox/amplify/backend/api/personalbox/schema.graphql or place .graphql files in a directory at /Users/tatsiida/AndroidStudioProjects/PersonalBox/amplify/backend/api/personalbox/schema
? Do you want to generate code for your newly created GraphQL API Yes
? Enter the file name pattern of graphql queries, mutations and subscriptions app/src/main/graphql/**/*.graphql
? Do you want to generate/update all possible GraphQL operations - queries, mutations and subscriptions Yes
? Enter maximum statement depth [increase from default if your schema is deeply nested] 2
⠸ Updating resources in the cloud. This may take a few minutes...

UPDATE_IN_PROGRESS amplify-personalbox-dev-152441 AWS::CloudFormation::Stack Thu Nov 12 2020 15:45:50 GMT+0900 (Japan Standard Time) User Initiated
⠴ Updating resources in the cloud. This may take a few minutes...

<?xml version="1.0" encoding="utf-8"?>

<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
    android:layout_width="match_parent"
    android:layout_height="match_parent"
    android:gravity="center"
    android:orientation="vertical">

    <TextView
        android:id="@+id/username"
        android:layout_width="wrap_content"
        android:layout_height="wrap_content"
        android:text="Hello World!" />

    <Button
        android:id="@+id/button"
        android:layout_width="wrap_content"
        android:layout_height="wrap_content"
        android:text="Open" />

    <TextView
        android:id="@+id/status"
        android:layout_width="match_parent"
        android:layout_height="wrap_content"
        android:gravity="center" />

</LinearLayout>

import json
import boto3
import logging
logger = logging.getLogger()
logger.setLevel(logging.INFO)

client = boto3.client('iot-data')

def lambda_handler(event, context):

    state = event['Records'][0]['dynamodb']['NewImage']['state']['S']
    thingName = event['Records'][0]['dynamodb']['NewImage']['boxid']['S']

    if(state != "OPENING"):
        logger.info("ignoring: " + state)
        return

    LOCK_STATE_OPEN = 1

    payload = json.dumps({'state': { 'desired': { 'lockState': LOCK_STATE_OPEN } }})

    logger.info("thingName:"+thingName+", payload:"+payload)

    response = client.update_thing_shadow(
        thingName = thingName, 
        payload =  payload
        )

const aws = require('aws-sdk');
const appsync = require('aws-appsync');
const gql = require('graphql-tag');
require('cross-fetch/polyfill');

const graphqlClient = new appsync.AWSAppSyncClient({
  url: 'https://xxxxxx.appsync-api.ap-northeast-1.amazonaws.com/graphql',
  region: 'ap-northeast-1',
  auth: {
    type: 'AWS_IAM',
    credentials: aws.config.credentials
  },
  disableOffline: true
});

const docClient = new aws.DynamoDB.DocumentClient();

exports.handler = async (event) => {

    const params = {
      TableName: 'PrototypePersonalBox-xxxxxx-dev',
      IndexName: 'byBoxId',
      KeyConditionExpression: 'boxid = :boxid',
      ExpressionAttributeValues: {
        ':boxid': event.thingName,
      }
    };

    let ret = await docClient.query(params).promise();
    const userid = ret.Items[0].id;
    
    const mutation = gql`mutation MyMutation($prototypePersonalBox: UpdatePrototypePersonalBoxInput!) {
     updatePrototypePersonalBox(input:$prototypePersonalBox) {
        state
        boxid
        id
      }
    }`;
    
    ret = await graphqlClient.mutate({
      mutation: mutation,
      variables: {
        prototypePersonalBox : {
        boxid : event.thingName,
        id : userid,
        state : "OPEN"
        }
      }
    });
    console.log(ret);
};

SELECT topic(3) AS thingName FROM 
'$aws/things/+/shadow/update/documents' 
WHERE current.state.reported.lockState = 1 
AND current.state.desired.lockState = 1

{
    "thingName": "PersonalBox-001"
}