sqs-dg-2009-02-01

More documents

Recommendations

Info

Amazon Simple Queue Service Developer GuideSpecial Information for SQS PoliciesSpecial Information for SQS PoliciesThe following list gives information specific to the SQS implementation of access control.• SQS allows you to share only certain types of permissions (for more information, see UnderstandingPermissions (p. 29))• Each policy must cover only a single queue (when writing a policy, don't include statements that coverdifferent queues)• Each policy must have a unique policy ID (Id)• Each statement in a policy must have a unique statement ID (sid)• SQS does not implement any special keys to use when you write conditions; the only keys availableare the general AWS-wide keys.The following table lists the maximum limits for policy information.NameBytesStatementsPrincipalsConditionsMaximum Limit8192205010API Version 2009-02-0161
Amazon Simple Queue Service Developer GuideIAM-Related Features of SQS PoliciesControlling User Access to YourAWS AccountTopics• IAM-Related Features of SQS Policies (p. 62)• AWS IAM and SQS Policies Together (p. 64)• Amazon SQS ARNs (p. 66)• Amazon SQS Actions (p. 67)• Amazon SQS Keys (p. 68)• Example AWS IAM Policies for Amazon SQS (p. 68)• Using Temporary Security Credentials (p. 70)Amazon SQS has its own resource-based permissions system that uses policies written in the samelanguage used for AWS Identity and Access Management (AWS IAM) policies. This means that you canachieve the same things with SQS policies that you can with AWS IAM policies. The main differencebetween using SQS policies versus AWS IAM policies is that you can grant another AWS Accountpermission to your queues with an SQS policy, and you can't do that with an AWS IAM policy.NoteWhen you grant other AWS accounts access to your AWS resources, be aware that all AWSaccounts can delegate their permissions to users under their accounts. This is known ascross-account access. Cross-account access enables you to share access to your AWS resourceswithout having to manage additional users. For information about using cross-account access,go to Enabling Cross-Account Access in Using AWS Identity and Access Management.This section describes how the SQS policy system works with AWS IAM.IAM-Related Features of SQS PoliciesYou can use an SQS policy with a queue to specify which AWS Accounts have access to the queue.Youcan specify the type of access and conditions (e.g., permission to use SendMessage, ReceiveMessage,if the request is before December 31, 2010). The specific actions you can grant permission for are aAPI Version 2009-02-0162
Page 1 and 2:
Amazon Simple Queue ServiceDevelope
Page 3 and 4:
Amazon Simple Queue Service Develop
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14: Amazon Simple Queue Service Develop
Page 63: Amazon Simple Queue Service Develop
show all

sqs-dg-2009-02-01

Create successful ePaper yourself

Delete template?

Save as template?