**To list the principals associated with an AWS IoT policy**

The following ``list-targets-for-policy`` example lists the device certificates to which the specified policy is attached. ::

    aws iot list-targets-for-policy \
        --policy-name UpdateDeviceCertPolicy

Output::

    {
        "targets": [
            "arn:aws:iot:us-west-2:123456789012:cert/488b6a7f2acdeb00a77384e63c4e40b18b1b3caaae57b7272ba44c45e3448142",
            "arn:aws:iot:us-west-2:123456789012:cert/d1eb269fb55a628552143c8f96eb3c258fcd5331ea113e766ba0c82bf225f0be"
        ]
    }

For more information, see `Thing Groups <https://docs.aws.amazon.com/iot/latest/developerguide/thing-groups.html>`__ in the *AWS IoT Developers Guide*.