I co-authored a post published on the official AWS IoT blog.
I described the automated approach to rotate x509 certificates used by IoT devices.
The proposed solution leverages managed AWS services and MQTT communication.
That is a quite advanced topic, feel free to reach out if you have any questions.
Link: https://aws.amazon.com/blogs/iot/how-to-manage-iot-device-certificate-rotation-using-aws-iot/