SQS
Prefix sqs, 20 actions · Domain Application Integration
18 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (2)
- AmazonSQSFullAccessAdmin
- AmazonSQSReadOnlyAccessReader
Operator and limited (7)
- AmazonSageMakerGroundTruthExecutionOperator
- AmazonSageMakerPipelinesIntegrationsOperator
- AmazonSecurityLakePermissionsBoundaryHigh privilegeOperator
- AWSThinkboxAWSPortalWorkerPolicyOperator
- AWSThinkboxDeadlineResourceTrackerAccessPolicyOperator
- AWSThinkboxDeadlineResourceTrackerAdminPolicyOperator
- AWSThinkboxDeadlineSpotEventPluginWorkerPolicyOperator
Service roles (8)
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
- AmazonSecurityLakeMetastoreManagerOperator
- AutoScalingNotificationAccessRoleOperator
- AWSElasticBeanstalkEnhancedHealthOperator
- AWSElasticBeanstalkRoleWorkerTierOperator
- AWSIoTRuleActionsHigh privilegeOperator
- AWSLambdaSQSQueueExecutionRoleOperator
Service-linked roles (1)
Also grants SQS actions (55)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AdministratorAccess-Amplify
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AlexaForBusinessGatewayExecution
- AmazonChimeFullAccess
- AmazonChimeVoiceConnectorServiceLinkedRolePolicy
- AmazonDevOpsGuruServiceRolePolicy
- AmazonEC2RolePolicyForLaunchWizard
- AmazonElasticMapReduceRole
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonRDSCustomInstanceProfileRolePolicy
- AmazonRDSCustomPreviewServiceRolePolicy
- AmazonRDSCustomServiceRolePolicy
- AmazonSecurityLakeAdministrator
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
- AWSElasticBeanstalkReadOnly
- AWSElasticBeanstalkService
- AWSElasticBeanstalkServiceRolePolicy
- AWSElasticBeanstalkWorkerTier
- AWSLambdaFullAccess
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTransformInfrastructureExecutorAccessBatch
- AWSTransformInfrastructureExecutorAccessEC2
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- ROSANodePoolManagementPolicy
- Route53RecoveryReadinessServiceRolePolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioProjectUserRolePolicy
- SecurityAudit
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
addpermission cancelmessagemovetask changemessagevisibility createqueue deletemessage deletequeue getqueueattributes getqueueurl listdeadlettersourcequeues listmessagemovetasks listqueuetags listqueues purgequeue receivemessage removepermission sendmessage setqueueattributes startmessagemovetask tagqueue untagqueue
Actions (20)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| sqs:AddPermission | Permissions management | 8 | 4 |
| sqs:CancelMessageMoveTask | Write | 8 | 1 |
| sqs:ChangeMessageVisibility | Write | 10 | 4 |
| sqs:CreateQueue | Write | 10 | 12 |
| sqs:DeleteMessage | Write | 12 | 12 |
| sqs:DeleteQueue | Write | 10 | 9 |
| sqs:GetQueueAttributes | Read | 34 | 20 |
| sqs:GetQueueUrl | Read | 25 | 13 |
| sqs:ListDeadLetterSourceQueues | Read | 18 | 2 |
| sqs:ListMessageMoveTasks | Read | 17 | 2 |
| sqs:ListQueueTags | Read | 20 | 6 |
| sqs:ListQueues | Read | 32 | 5 |
| sqs:PurgeQueue | Write | 9 | 1 |
| sqs:ReceiveMessage | Read | 14 | 13 |
| sqs:RemovePermission | Permissions management | 8 | 1 |
| sqs:SendMessage | Write | 13 | 16 |
| sqs:SetQueueAttributes | Permissions management | 9 | 7 |
| sqs:StartMessageMoveTask | Write | 8 | 2 |
| sqs:TagQueue | Tagging | 9 | 8 |
| sqs:UntagQueue | Tagging | 9 | 2 |