AWS IoT Core + Cloud WatchでRapsberry pi pico w から取得したデータを爆速でグラフ化する

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "iot:Connect",
      "Resource": "arn:aws:iot:ap-northeast-1:アカウントID:client/BlogClient"
    },
    {
      "Effect": "Allow",
      "Action": "iot:Publish",
      "Resource": "arn:aws:iot:ap-northeast-1:アカウントID:topic/pico/pub"
    },
    {
      "Effect": "Allow",
      "Action": "iot:Subscribe",
      "Resource": "arn:aws:iot:ap-northeast-1:アカウントID:topicfilter/pico/sub"
    },
    {
      "Effect": "Allow",
      "Action": "iot:Receive",
      "Resource": "arn:aws:iot:ap-northeast-1:アカウントID:topic/pico/sub"
    }
  ]
}

import network
from machine import Pin
import ujson
import tls
import time
#import ntptime
import ubinascii
from umqtt.simple import MQTTClient

#タクトスイッチを接続、プルアップにしておくことで通常はH出力、スイッチを押したらグランドに接続されL出力になる
sw = Pin(5,Pin.IN,Pin.PULL_UP)
#タクトスイッチを押した際にLEDが光るようにLEDの定義
led = Pin('LED',Pin.OUT)
led.value(0)

#LAN設定
wlan = network.WLAN(network.STA_IF)
wlan.active(True)
wlan.connect("XXX","XXX")
while wlan.status() != network.STAT_GOT_IP:
    print('waiting...')
    time.sleep(1)
status = wlan.ifconfig()
print(f'IP address {status[0]}')

#エンドポイントは AWS IoTコンソールの"接続"メニューの"ドメイン設定"でわかる
aws_endpoint = b'a1o40xxxxxxxxxxxx.iot.ap-northeast-1.amazonaws.com'

#ポリシー設定で登録したものと名前を合わせる
client_id = "BlogClient"
topic_pub = "pico/pub"
topic_sub = "pico/sub"

#認証ファイル  事前にmpremoteコマンドで転送しておきます
CERT_FILE = "/certs/certificate.der"
KEY_FILE = "/certs/private.der"
CA_FILE = "/certs/routeca.der"

#接続用function
def mqtt_connect(client=client_id, endpoint=aws_endpoint):
    context = tls.SSLContext(tls.PROTOCOL_TLS_CLIENT)
    
    print("Read Cert file...")
    context.load_cert_chain(
        open(CERT_FILE, "rb").read(), open(KEY_FILE, "rb").read()
    )
    context.load_verify_locations(open(CA_FILE, "rb").read())

    print("Setting up MQTT Client...")
    mqtt = MQTTClient(
        client, endpoint, port=8883, keepalive=3600, ssl=context
    )
    print("Connect to AWS IoT Core...")
    mqtt.connect()
    return mqtt

#publish用function
def mqtt_publish(client, topic=topic_pub, message=''):
    #print("Publishing message...")
    #client.publish(topic, message)
    #print(message)

    try:
        client.publish(topic, message)
        print(f"Message published: {message}")
    except Exception as e:
        print(f"Failed to publish message: {e}")
           
   
#---------------------------------------------------------

#接続
try:
    mqtt = mqtt_connect()
except Exception as e:
    print(e)
    print("Unable to connect to MQTT.")

#メインループ
sw_value = 1
while True:
    if sw.value() == 1:
        led.value(0)
        time.sleep(0.1)
        sw_value = 1
    else:
        led.value(1)
        time.sleep(0.1)
        if sw_value == 1:
        #スイッチを押されたらpublishする。押しっぱなしの場合も初めの１回のみ
            print("pushed")
            sw_value = 0

　　　　　　 #送信情報をまとめる。            
            mesg = ujson.dumps({
                "state":{
                    "reported": {
                        "device": {
                            "client": client_id,
                            "uptime": time.ticks_ms()
                        },
                        "sw": {
                            "push": 1
                        }
                    }
                }
            })
            try:
                mqtt_publish(client=mqtt, message=mesg)
            except:
                print("Unable to publish message.")

$ openssl x509 -in f7c4a3****a01-certificate.pem.crt -inform PEM -out certificate.der -outform DER
$ openssl rsa -in f7c4a3****a01-private.pem.key -inform PEM -out private.der -outform DER
$ openssl x509 -in AmazonRootCA1.pem -out routeca.der -inform PEM -outform DER 

{
    "Version": "2012-10-17",
    "Statement": {
        "Effect": "Allow",
        "Action": "cloudwatch:PutMetricData",
        "Resource": [
            "*"
        ]
    }
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "iot.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}