iot_topic_rule.tf

resource "aws_iot_topic_rule" "shadow_rejection_errors" {
 name = "shadow_rejected_error"
 description = "Add a metric to cloudwatch if any shadow fails update"
 enabled = true
 sql = "SELECT *, topic(3) as device_id FROM '$aws/things/+/shadow/update/rejected'"
 sql_version = "2016-03-23"

 cloudwatch_metric {
   metric_name = "Rejected"
   metric_namespace = "Shadow"
   metric_value = "1"
   metric_unit = "Count"
   metric_timestamp = "${join("", list("$", "{timestamp()}"))}"
   role_arn = "${var.iot_metrics_to_cloudwatch_arn}"
 }
}