Merge pull request #26 from ministryofjustice/dlq-redrive-permissions

Add new DLQ Redrive permissions to SQS policy
ministryofjustice · Aug 24, 2023 · ad395b9 · ad395b9
2 parents ac91653 + f6378ae
commit ad395b9
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/sqs.tf b/sqs.tf
@@ -16,11 +16,14 @@ data "aws_iam_policy_document" "sqs_for_github" {
     sid    = "AllowSQSSendRecvOwn"
     effect = "Allow"
     actions = [
+      "sqs:CancelMessageMoveTask",
       "sqs:ChangeMessageVisibility",
       "sqs:DeleteMessage",
+      "sqs:ListMessageMoveTasks",
       "sqs:ReceiveMessage",
       "sqs:SendMessage",
-      "sqs:PurgeQueue",
+      "sqs:StartMessageMoveTask",
+      "sqs:PurgeQueue"
     ]
     resources = ["*"]
     condition {