Step 3 - Create SQS
- Under Services, go to Simple Queue Service (SQS).
- Click Create New Queue.
- Enter a Queue Name and select Standard Queue as the queue type.
- Click Create Queue.
- Copy the new queue’s ARN.
- Go to the Access Policy section.
-
Click the Edit button and paste the following policy information.
{ "Version": "2012-10-17", "Id": " default_policy_ID", "Statement": [ { "Sid": "receiver_statement", "Effect": "Deny", "Principal": { "AWS": "<<Role_ARN>>" }, "Action": [ "sqs:ReceiveMessage", "sqs:ChangeMessageVisibility", "sqs:DeleteMessage" ], "Resource": "<<Queue_ARN>>", "Condition": { "ArnNotEquals": { "aws:PrincipalArn": "<<Role_ARN>>" } } }, { "Sid": "sender_statement", "Effect": "Allow", "Principal": { "Service": "s3.amazonaws.com" }, "Action": "sqs:SendMessage", "Resource": "<<Queue_ARN>>", "Condition": { "ArnEquals": { "aws:SourceArn": "<<S3_Bucket_ARN>>" } } } ] }
In the above code, replace all of the strings in double brackets ( << >> ) with the appropriate values:
- Replace
<<Role_ARN>>
with the role ARN that you copied at the end of Step 1 - Create an IAM role for Lookout Secure Cloud Access. - Replace
<<Queue_ARN>>
with the queue ARN that you copied in step 5 of this section. - Replace
<<S3_Bucket_ARN>>
with the bucket ARN that you copied at the end of Step 2 - Create a Cloud Trail.
- Replace
- Click Create Queue.