amazon-web-services - SQS 策略不授予访问权限

Question

我创建了一个带有 SQS 策略的 SQS，授予对 iam_user_1 的访问权限

Resources:
  MyQueue:
    Type: 'AWS::SQS::Queue'
    Properties:
      QueueName:
        'Fn::Join': ['-', ["my-queue-prefix", {Ref: Stage}]]
      MessageRetentionPeriod: 60
      ReceiveMessageWaitTimeSeconds: 20

  QueuePolicy:
    Type: 'AWS::SQS::QueuePolicy'
    Properties:
      Queues:
        - {Ref: MyQueue}
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Action:
              - sqs:ReceiveMessage
            Principal:
              AWS:
                - '<account_1>'
            Resource: {Ref: MyQueue}
            Condition:
              ArnEquals:
                aws:SourceArn: 'arn:aws:iam::<account_1>:user/iam_user_1'

使用此队列策略，我的用户仍然无法访问队列 - 403 访问被拒绝。我也尝试principal将

Principal:
   AWS:
      - 'arn:aws:iam::<account_1>:user/iam_user_1'

是否可以仅使用 sqs 策略允许 iam 用户访问读取 SQS。我是否必须修改 iam 用户策略才能授予对 sqs 的访问权限？

标签： amazon-web-servicesamazon-cloudformationamazon-iamamazon-sqs