29.07.2020 Views

sqs-dg-2009-02-01

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Amazon Simple Queue Service Developer Guide

Amazon SQS Policy Examples

}

}

"Resource": "/987654321098/queue1"

The following example policy gives all users ReceiveMessage permission for the queue named

987654321098/queue1.

{

}

"Version": "2008-10-17",

"Id": "Queue1_Policy_UUID",

"Statement":

{

"Sid":"Queue1_AnonymousAccess_ReceiveMessage",

"Effect": "Allow",

"Principal": {

"AWS": "*"

},

"Action": "sqs:ReceiveMessage",

"Resource": "/987654321098/queue1"

}

The following example policy gives all users ReceiveMessage permission for the queue named

987654321098/queue1, but only between noon and 3:00 p.m. on January 31, 2009.

{

}

"Version": "2008-10-17",

"Id": "Queue1_Policy_UUID",

"Statement":

{

"Sid":"Queue1_AnonymousAccess_ReceiveMessage_TimeLimit",

"Effect": "Allow",

"Principal": {

"AWS": "*"

},

"Action": "sqs:ReceiveMessage",

"Resource": "/987654321098/queue1",

"Condition" : {

"DateGreaterThan" : {

"aws:CurrentTime":"2009-01-31T12:00Z"

},

"DateLessThan" : {

"aws:CurrentTime":"2009-01-31T15:00Z"

}

}

}

The following example policy gives all users permission to use all possible SQS actions that can be shared

for the queue named 987654321098/queue1, but only if the request comes from the 192.168.143.0/24

range.

{

"Version": "2008-10-17",

"Id": "Queue1_Policy_UUID",

API Version 2009-02-01

58

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!