March 2008
Intermediate to advanced
604 pages
18h 38m
English
Content preview from Programming Amazon Web ServicesBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Queue Access Control
SQS provides an access control mechanism that allows you to specify who can access your queues and what actions they can perform. Access control settings are specified as a set of rules, and each rule associates a specific permission with a grantee who receives that permission. For any action to be permitted in SQS, the user performing the action must have been granted the permission to perform that action with an explicit rule.
Warning
Access control settings can be applied only at the queue level and not to individual messages, so if you make a queue accessible to others, make sure you do not send any private messages to that queue.
Grantees
There is only one kind of grantee who can be assigned access permissions with queue access controls: individual SQS users. SQS users are identified by their AWS canonical identifier, a long, hex-encoded value that uniquely identifies an individual AWS user account. Because this user ID value is difficult for humans to work with, SQS allows us to identify users with their Amazon email address when adding new rules.
Permissions
SQS access control rules apply one of three permission settings:
- ReceiveMessage
The grantee is allowed to receive, peek at, and delete messages in the queue.
- SendMessage
The grantee is allowed to send messages to the queue.
- FullControl
The grantee is allowed to perform any action on the queue or on messages in the queue. In addition to being able to send, receive, and delete messages, a user with full permissions ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.