I created a new user and assigned it the following policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"sqs:DeleteMessage",
"sqs:GetQueueUrl",
"sqs:ListQueues",
"sqs:ChangeMessageVisibility",
"sqs:SendMessageBatch",
"sqs:UntagQueue",
"sqs:ReceiveMessage",
"sqs:SendMessage",
"sqs:GetQueueAttributes",
"sqs:ListQueueTags",
"sqs:",
"sqs:TagQueue",
"sqs:ListDeadLetterSourceQueues",
"sqs:DeleteMessageBatch",
"sqs:PurgeQueue",
"sqs:DeleteQueue",
"sqs:CreateQueue",
"sqs:ChangeMessageVisibilityBatch",
"sqs:SetQueueAttributes"
],
"Resource": ""
}
]
}
I also gave it access to 'all resources' instead of a specific ARN
However, if I try to get the list of queues, I see one which I don't recognize, and if I try to directly view one of my SQS queues by getting its attributes, it tells me I don't have access to it.
Any ideas what I did wrong..? May be because of that one unknown queue, its pulling from somewhere else instead of my account's queues?