Five Raspberry Pis is a project. Five hundred is a fleet. We help engineering teams cross that gap — designing AWS IoT architectures that are reliable, secure and actually operable in the real world.
The reality
The hardware isn't the problem. The operational model is. Manual workflows that worked for ten devices quietly collapse when you reach a few hundred — usually at the worst possible moment.
Hand-imaging SD cards and SSH-ing into devices works until you can't physically reach them.
No central view of which devices are online, healthy, or running the right software version.
Shared credentials, disabled updates, and no certificate strategy create real attack surface.
Site visits cost time and money. Every truck-roll is a sign the architecture has gaps.
Devices in real environments lose connectivity, power, and patience with brittle software.
Provisioning, updating, monitoring and retiring devices is treated as one-off work, not a system.
What this page is about
"AWS IoT device management" is a broad term. In a Raspberry Pi context — what people often search as AWS IoT Raspberry Pi management — it usually means three concrete things: a secure identity per device, a managed channel for telemetry and commands, and a repeatable way to provision, update and retire each unit in the fleet.
AWS IoT Core handles the messaging, identity and routing in the cloud — a typical Raspberry Pi AWS IoT Core setup registers each Pi as a Thing with its own certificate. AWS IoT Greengrass on Raspberry Pi extends that down onto the device itself for local compute and offline operation, which is why Raspberry Pi edge computing on AWS so often pairs the two. You don't always need both — the difference between a working prototype and a production fleet is usually about operational design, not which AWS services you pick.
Manual setup, local SSH, ad-hoc updates, single environment.
Automated provisioning, signed OTA updates, fleet observability, defined SLOs.
What we help with
Everything you need to manage Raspberry Pi devices on AWS — from first boot to the ten-thousandth — without the operational debt that usually creeps in.
Repeatable, automated bring-up — no manual SD card per device.
Per-device X.509 certificates, rotation, and revocation built in.
Health, connectivity, version state — visible centrally, alerted on drift.
Signed, staged rollouts with automatic rollback. No site visits.
Local compute via Greengrass when latency, autonomy or data volume demand it.
Telemetry into S3, DynamoDB, Kinesis or Timestream — clean and structured.
A single source of truth for device state, configuration and lifecycle.
Industrial enclosures, eMMC, power conditioning — not hobby kit.
Architecture
A scalable Raspberry Pi + AWS IoT deployment separates concerns across three layers. Each one does one job well, and the boundaries between them stay simple.
Device layer
The hardware itself. Runs your application, captures sensor data, executes commands. Hardened OS image, immutable where possible, with a per-device identity baked in at provisioning.
Edge layer
Optional. AWS IoT Greengrass when you need offline operation, local decision-making, or to filter data before sending it upstream. Skip this layer until you have a real reason for it.
Cloud layer
Secure messaging, identity, jobs, device shadows. Data routes into S3, DynamoDB, Kinesis, or analytics pipelines. Dashboards, alerting and lifecycle automation live here.
Common mistakes
Treating Raspberry Pi like a development tool, then putting it in production unchanged.
No defined device lifecycle — provisioning, updates and retirement handled ad-hoc.
Overengineering the cloud architecture before the basics are proven.
Ignoring edge reliability: power, connectivity, thermal, physical access.
No operational model — nobody owns the fleet's health day-to-day.
Custom messaging and queuing layers built before AWS IoT Core has been tried properly.
Outcomes
One place to see, configure and update every device.
Truck-rolls become rare. OTA handles the rest.
Per-device certificates, rotated and revocable.
Edge resilience and health observability built in.
Adding the next 500 devices doesn't require a rewrite.
Who this is for
Software companies whose product depends on physical devices.
Hardware vendors building Pi into their shipped products.
Manufacturing, energy, utilities — uptime matters.
Distributed fleets where connectivity is variable.
Explore further
Each of these is a deeper look at how we deliver Raspberry Pi and edge infrastructure for enterprise — from initial design through to fully managed operations.
Our end-to-end approach to designing, deploying and managing Raspberry Pi at scale.
Learn moreArchitecture and design support for Raspberry Pi, edge and AWS IoT deployments.
Learn morePre-configured Raspberry Pi hardware delivered, imaged and ready for production.
Learn moreCentralised fleet control, monitoring, OTA updates and lifecycle management.
Learn moreOngoing operational ownership of your Raspberry Pi estate, end to end.
Learn moreReal-world Raspberry Pi and edge deployments we've helped design and run.
Learn moreSpecialists in Raspberry Pi, AWS IoT and edge infrastructure for enterprise.
Learn moreRelated insights
What changes between 5, 50 and 500 devices — and the lifecycle gap most teams miss.
Read articleA practical baseline architecture, common mistakes, and when to add complexity.
Read articleWhen edge compute is essential, when it isn't, and how to decide without overengineering.
Read articleFAQ
By giving each device a secure identity (typically an X.509 certificate), connecting it to AWS IoT Core, and using device shadows, jobs and OTA pipelines to monitor state, push configuration and roll out updates without physical access.
Yes. AWS IoT Core, IoT Device Management and Greengrass are designed for fleets of thousands of devices. The constraint is rarely AWS — it's whether your provisioning, identity and update strategy is consistent across the estate.
Only if you have a real edge requirement: unreliable connectivity, latency-sensitive decisions, high data volumes that need filtering locally, or autonomy when offline. Otherwise, plain AWS IoT Core is simpler and cheaper.
Production fleets use OTA pipelines: signed images or container updates, staged rollouts, automatic rollback on failure, and per-device job tracking via AWS IoT Jobs. Manual SSH-based updates do not scale past a handful of devices.
Yes — when treated as a real product. That means industrial-grade SD cards or eMMC, proper enclosures and power, hardened OS images, automated provisioning and a defined device lifecycle. Without those, it remains a prototyping tool.
IoT Core is the cloud-side broker and management plane. Greengrass runs on the device for local compute and offline operation. Most fleets start with Core and only adopt Greengrass once a specific edge constraint appears.
No pitch, no pressure. If you're working through AWS IoT Core, Greengrass, OTA updates or fleet operations and want a second opinion — we're easy to talk to.