resource "aws_iot_policy" "thing_policy" {

  name        = "iot-thing-policy"

  policy = <<POLICY
{
  "Version": "2012-10-17",
  "Statement": {
    "Effect": "Allow",
    "Action": "iot:AssumeRoleWithCertificate",
    "Resource": "*"
  }
}
POLICY

}