Skip to content

Amazon SQS IAM Policy for Shoryuken

Jordan Sanders edited this page Mar 11, 2020 · 10 revisions

Below is a minimum IAM Policy required for Shoryuken to function.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "ShoryukenAccess",
			"Effect": "Allow",
			"Action": [
				"sqs:ChangeMessageVisibility",
				"sqs:DeleteMessage",
				"sqs:GetQueueAttributes",
				"sqs:GetQueueUrl",
				"sqs:ReceiveMessage",
				"sqs:SendMessage",
 				"sqs:ListQueues"
			],
			"Resource": "arn:aws:sqs:REGION:ACCOUNT:*"
		}
	]
}

Note: sqs:ListQueues is only needed for running shoryuken sqs ls (for listing queues, see shoryuken help sqs). You don't need it for sending and receiving messages.

See IAM Policies for the AWS User Guide.