MQTT IOT-CORE subscribe authentication

How can a client(hardware) can connect to AWS iot-core. One way is the using certificate and private key.