Home Automation with Raspberry Pi and AWS - IoT - 2019

Download the raspbian buster lite image from raspberrypi.org, and download the zip, then extract it to access the image file for your Raspberry Pi project.

Download the raspbian image, flash it to an SD card with balenaEtcher, then modify the boot partition to enable ssh and set wifi access for your Raspberry Pi.

Enable SSH by creating an empty file named ssh on the Raspberry Pi boot drive; this first boot step allows SSH access from your local computer.

Download the wifi setup file, rename underscores to dashes, enter your ssid, password, and country code in the editor, then save and copy to the Raspberry Pi boot folder.

Learn to safely eject the flash card, disconnect the USB adapter, and verify the drive is removed before moving to install it in a Raspberry Pi.

Insert the microSD card into the Raspberry Pi, power on the device, and locate its IP address by checking the connected devices on your router.

Enhance Raspberry Pi security by creating a new user with sudo, testing access, then deleting the default pi user and setting up an app user for the door sensor GPS.

Create a new user for the app, set a password and name, then add the user to the sudo group to grant superuser privileges.

Learn how to enable passwordless sudo for deployment scripts by editing the sudoers file, allowing automated commands to run without a password during deployment.

Grant the user app permission to access the Raspberry Pi GPIO pins by adding the app to the gpio group, enabling door sensor inputs and full IO control.

Test whether the user app is real or pseudo and demonstrate permission handling with sudo, showing that elevated access can resolve issues.

Delete the default pi user, change its password, and verify that only the app user can log in, preventing unauthorized ssh access to the Raspberry Pi.

Log in to the Raspberry Pi using the app user; you always use the user app, and it's time to move to the next lecture.

Create an RSA key pair in a .ssh folder, generate public and private keys, save the private key as pi, and configure ssh login to Raspberry Pi without a password.

Disable password authentication by editing the sshd_config on the raspberry pi, then restart the ssh service and verify login only works with a private key.

Create your AWS account to access the one-year free tier, verify your identity by phone, and choose a personal plan with a credit card on file.

Create an IAM user with administrative privileges and log in instead of the root account, then enable MFA, use IAM groups to assign permissions, and delete the root access key.

Activate multi-factor authentication on your router by installing an authenticator app (Google Authenticator or Alpha), scanning the code, and entering generated numbers to complete two-factor authentication.

Create a new AWS user for the console, assign them to the administrator group, and review credentials and password reset options for secure home automation management.

Choose and validate a unique alias for an AWS account, log in from the dashboard, and customize the account link based on availability.

Sign in with a new user, sign out when needed, and manage account details by entering your username and password and following the provided link.

Configure IAM password policy to strengthen security by setting a minimum length of eight characters and requiring at least one uppercase and one lowercase letter, then apply the policy.

Set up multi-factor authentication for a new user by selecting user, accessing credentials, pairing an MFA device, scanning a QR code, and entering the code twice to protect the account.

Create a Raspberry Pi user on AWS IAM with programmatic access, generate access keys for the Raspberry Pi, and download the credentials securely for future AWS SDK and IoT integration.

Install forever and forever-service on a Raspberry Pi to run your app as a Linux service that starts on boot and logs activity.

Install Node.js version 10 on a Raspberry Pi, verify npm, and explore using the AWS SDK for IoT projects on Raspberry Pi Linux.

Select an AWS region close to you for the Raspberry Pi setup, choose one from the list, and record the region name for the upcoming aws configure step.

Define and create a DynamoDB table to log door sensor events with the time, Raspberry Pi serial, and status (open or close), and configure aws permissions and sns sms notifications.

Create a DynamoDB table named door sensor with a partition key as the serial string and a sort key as date time, then configure provisioned read and write capacity.

Create a DynamoDB item with a Raspberry Pi serial number and status to log door state (open or close), demonstrating how devices write to the table.

Grant a Raspberry Pi user precise DynamoDB permissions with an IAM policy to list tables and put items in the door sensor table, demonstrating least-privilege access.

Remove the DynamoDB list tables permission to enforce minimum access for the Raspberry Pi, enabling only put item operations for the door sensor's table. Verify that listing tables is disallowed.

Add a text message notification service to the Raspberry Pi project, mirroring the Dynamo Gibby setup and configuring the Pi to access AWS services with phone-number permissions.

Create an AWS SNS topic named door sensor with basic access, then configure an SMS subscription to receive alerts on your phone, and test with the Raspberry Pi.

Test publishing a message to an SNS topic from a Raspberry Pi, creating message.txt, locating the topic ARN, and resolving a publish permission error.

Learn to grant a Raspberry Pi publish permissions to an SNS topic by creating and attaching a precise policy that specifies region, account, and topic name.

Publish to a topic again using a Raspberry Pi with AWS IoT, monitor message IDs, and confirm message reception in real time.

Create an AWS Systems Manager parameter store entry to avoid hard-coded values, store the parameter ARN and value during deployment, and access it in code on devices.

Configure the raspberry pi's IAM user with SSM read-only access to the AWS parameter store, then use the AWS CLI to fetch parameters and publish to DynamoDB and SNS.

Connect the door sensor to the Raspberry Pi, log events to DynamoDB, and send text messages when doors open or close, while deploying code via GitHub, CodePipeline, and AWS CodeDeploy.

test a door sensor for a raspberry pi iot setup, wiring the circuit with a magnet, powering on, and confirming 0/1 readings to verify the sensor works.

Test the door sensor attached to the door by opening and closing to verify readings. Then connect the sensor setup to the Raspberry Pi for integration.

Connect the door sensor to the Raspberry Pi and complete the hardware setup using the pins and red wire, then proceed to the software setup.

Learn how to connect a door sensor to a Raspberry Pi using a pulldown resistor on GPIO13 to prevent floating input and reduce false alarms.

Learn how to prepare a Raspberry Pi for AWS code deploy and deploy code to the device, enabling access to AWS IoT services.

Install the AWS CodeDeploy agent on Raspberry Pi to deploy code without opening firewall ports, install Ruby, configure region, start the service, and verify status across devices.

Install the CodeDeploy agent on the Raspberry Pi and refresh the on-premise instance, then issue a deployment command and wait for the Pi to appear in the CodeDeploy screen.

Discover how to use the Raspberry Pi's unique serial number as a stable device identifier when hashing and deploying code to multiple Raspberry Pi devices.

This lecture covers registering AWS CodeDeploy for an on-premise Raspberry Pi, creating a deployment user with permissions, and copying the on-premise configuration file to the agent.

Watch the Raspberry Pi register and appear in the AWS CodeDeploy dashboard as an on premise instance, using its serial number to confirm the registration.