Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Step 3 - Create SQS

  1. Under Services, go to Simple Queue Service (SQS).
  2. Click Create New Queue.
  3. Enter a Queue Name and select Standard Queue as the queue type.
  4. Click Create Queue.
  5. Copy the new queue’s ARN.
  6. Go to the Access Policy section.
  7. Click the Edit button and paste the following policy information.
    
    {
    "Version": "2012-10-17",
    
    "Id": " default_policy_ID", 
    "Statement": [
    {
    "Sid": "receiver_statement", "Effect": "Deny", "Principal": {
    "AWS": "<<Role_ARN>>"
    },
    "Action": [ 
    "sqs:ReceiveMessage", "sqs:ChangeMessageVisibility", "sqs:DeleteMessage"
    ],
    "Resource": "<<Queue_ARN>>",
       "Condition": { "ArnNotEquals": {
          "aws:PrincipalArn": "<<Role_ARN>>"
          }
       }
    },
    {
    "Sid": "sender_statement", "Effect": "Allow", "Principal": {
    "Service": "s3.amazonaws.com"
    },
    "Action": "sqs:SendMessage",
    "Resource": "<<Queue_ARN>>", "Condition": {
       "ArnEquals": {
          "aws:SourceArn": "<<S3_Bucket_ARN>>"
          }
       }
    }
    ]
    }

    In the above code, replace all of the strings in double brackets ( << >> ) with the appropriate values:

    • Replace <<Role_ARN>> with the role ARN that you copied at the end of Step 1 - Create an IAM role for Lookout Secure Cloud Access.
    • Replace <<Queue_ARN>> with the queue ARN that you copied in step 5 of this section.
    • Replace <<S3_Bucket_ARN>> with the bucket ARN that you copied at the end of Step 2 - Create a Cloud Trail.
  8. Click Create Queue.