View a markdown version of this page

Actions, resources, and condition keys for Amazon SQS - Service Authorization Reference

Actions, resources, and condition keys for Amazon SQS

Amazon SQS (service prefix: sqs) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by Amazon SQS

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

AddPermission

sqs:AddPermission

Permissions management, Write

CancelMessageMoveTask

sqs:CancelMessageMoveTask

Write

sqs:DeleteMessage

Write

sqs:GetQueueAttributes

Read

sqs:ReceiveMessage

Read

ChangeMessageVisibility

sqs:ChangeMessageVisibility

Write

ChangeMessageVisibilityBatch

sqs:ChangeMessageVisibility

Write

CreateQueue

sqs:CreateQueue

Write

sqs:TagQueue

Tagging, Write

DeleteMessage

sqs:DeleteMessage

Write

DeleteMessageBatch

sqs:DeleteMessage

Write

DeleteQueue

sqs:DeleteQueue

Write

GetQueueAttributes

sqs:GetQueueAttributes

Read

GetQueueUrl

sqs:GetQueueUrl

Read

ListDeadLetterSourceQueues

sqs:ListDeadLetterSourceQueues

Read

ListMessageMoveTasks

sqs:GetQueueAttributes

Read

sqs:ListMessageMoveTasks

Read

ListQueueTags

sqs:ListQueueTags

Read

ListQueues

sqs:ListQueues

Read

PurgeQueue

sqs:PurgeQueue

Write

ReceiveMessage

sqs:ReceiveMessage

Read

RemovePermission

sqs:RemovePermission

Permissions management, Write

SendMessage

sqs:SendMessage

Write

SendMessageBatch

sqs:SendMessage

Write