How to set up least privilege access to your encrypted Amazon SQS queue

Amazon Simple Queue Service (Amazon SQS) is a fully managed message queue service that enables developers to decouple and scale microservices and distributed systems.

Amazon SQS provides an authentication mechanism to control access to queues and also provides encryption in transit and at rest using AWS Key Management Service.

AWS KMS helps protect data passed to Amazon SQS, which can exchange sensitive data with other AWS services, including Amazon SNS and Amazon S3.

This post covers several AWS Identity and Access Management (IAM) policy statements that help securely control access to and encrypt Amazon SQS queues using AWS KMS.