You should use certificate variables in your IoT policy and set the certificate SubjectName to the actual Thing Name of your device. This will allow you to filter based on Thing Names for Greengrass devices.