AWS

Amazon Simple Queue Service Developer Guide
Amazon SQS Policy Examples
}
}
"Resource": "/987654321098/queue1"
The following example policy gives all users ReceiveMessage permission for the queue named
987654321098/queue1.
{
}
"Version": "2008-10-17",
"Id": "Queue1_Policy_UUID",
"Statement":
{
"Sid":"Queue1_AnonymousAccess_ReceiveMessage",
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": "sqs:ReceiveMessage",
"Resource": "/987654321098/queue1"
}
The following example policy gives all users ReceiveMessage permission for the queue named
987654321098/queue1, but only between noon and 3:00 p.m. on January 31, 2009.
{
}
"Version": "2008-10-17",
"Id": "Queue1_Policy_UUID",
"Statement":
{
"Sid":"Queue1_AnonymousAccess_ReceiveMessage_TimeLimit",
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": "sqs:ReceiveMessage",
"Resource": "/987654321098/queue1",
"Condition" : {
"DateGreaterThan" : {
"aws:CurrentTime":"2009-01-31T12:00Z"
},
"DateLessThan" : {
"aws:CurrentTime":"2009-01-31T15:00Z"
}
}
}
The following example policy gives all users permission to use all possible SQS actions that can be shared
for the queue named 987654321098/queue1, but only if the request comes from the 192.168.143.0/24
range.
{
"Version": "2008-10-17",
"Id": "Queue1_Policy_UUID",
API Version 2009-02-01
58