I co-authored a post published on the official AWS IoT blog.
I described the automated approach to rotate x509 certificates used by IoT devices.
The proposed solution leverages managed AWS services and MQTT communication.
That is a quite advanced topic, feel free to reach out if you have any questions.