Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add GetQueueAttributes to SQS policy (#11)
For AWS ControlTower integration using SSO, "sqs:GetQueueAttributes" is required. While as of 0.15 this permission is added to the cross-account role policy, it has not yet been added to the SQS Access Policy, causing CloudTrail integration to encounter 403 errors. **How did you test this change?** Replicated issue in a personal account and ControlTower using SSO, updated Access Policy for SQS queue manually to add sqs:GetQueueAttributes permission for the cross-account role, and CloudTrail integration began populating without errors.
- Loading branch information