There are other ways to accomplish that (asymmetric cryptography says hi). You don't need AWS IoT for everything. I cringe when people's default solution is to make their company dependent on a niche product of another company, especially when its easily avoidable.