this tiny script cleans up your AWS IoT Core environment by deleting unused certificates which aren't connected to anything, I mean any "Thing" 🤪

aws_iot_certificate_cleanup.py

import boto3

boto3.setup_default_session(profile_name='awsiot')
client = boto3.client('iot')

list_certificates_paginator = client.get_paginator('list_certificates')
list_certificates_pages = list_certificates_paginator.paginate()

for list_certificates in list_certificates_pages:
    for certificate in list_certificates["certificates"]:
        principal = client.list_principal_things(principal=certificate["certificateArn"])
        print("%s arn things: %d" % (certificate["certificateId"], len(principal["things"])))
        if len(principal["things"])==0:
            print("> disabling certificate")
            client.update_certificate(certificateId=certificate["certificateId"], newStatus='INACTIVE')
            print("> disabled, deleting certificate")
            client.delete_certificate(certificateId=certificate["certificateId"], forceDelete=True)
            print("> deleted")