Dispatch

All Sections

Configuring Amazon SQS targets

Content

Configuration options

Queue URL: The URL of your queue, as shown in the SQS console
AWS Region: The region your queue is located in. (e.g. us-east-1)
Role ARN: Your AWS IAM role that Dispatch will assume in order to send messages to your queue

You can find the configuration options common for all targets in the main configuration page.

Allowing Dispatch to send messages to your queue

Dispatch needs to assume a AWS IAM role that you provide in order to deliver messages to your SQS queues. This role needs the following permissions:

sqs:SendMessage: In order to send messages
sqs:ReadQueueAttributes: In order to verify that the queue exists

This role also needs a trust policy that allows Dispatch to assume the role. When assuming your role, Dispatch will pass your MolnX Organization ID as the External ID. You can read more about External ID and how it ensures secure role delegation in the AWS documentation.

You can find your MolnX Organization ID in the organization drop down when signed into the MolnX portal.

The AWS Account Id used by Dispatch when assuming the role is 585672910417.

Example role policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowSQSActions",
            "Effect": "Allow",
            "Action": [
                "sqs:SendMessage",
                "sqs:GetQueueAttributes"
            ],
            "Resource": "arn:aws:sqs:us-east-1:1122334455:my-queueChange to match the ARN of your SQS queue
"
        }
    ]
}

Example trust policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowMolnXAccess",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::585672910417:rootThis is the AWS account that Dispatch will use to access your IAM role
"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "IA-O-aabbcc1122Change to match your MolnX organization ID
"
        }
      }
    }
  ]
}

If you have any questions you can't find the answer for, please don't hesitate to contact us.