本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# Amazon SQS API 权限：操作和资源参考
<a name="sqs-api-permissions-reference"></a>

在设置 [访问控制](security_iam_service-with-iam.md#access-control) 和编写您可附加到 IAM 身份的权限策略时，可以使用下表作为参考。表格列表每个 Amazon Simple Queue Service 操作、您可以为其授予执行该操作的权限的相应操作，以及您可以为其授予权限的 AWS 资源。

在策略的 `Action` 字段中指定操作，并在策略的 `Resource` 字段中指定资源值。要指定操作，请在 操作名称之前使用 `sqs:` 前缀（例如，`sqs:CreateQueue`）。

目前，Amazon SQS 支持 [IAM 中提供的全局条件上下文键](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。

使用滚动条查看表的其余部分。


**Amazon Simple Queue Service API 和操作所需的权限**  
<a name="sqs-api-and-required-permissions-for-actions-table"></a>

- ** `[AddPermission](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_AddPermission.html)` **
  - **所需的权限:** sqs:AddPermission
  - **资源:** `arn:aws:sqs:{{region}}:{{account_id}}:{{queue_name}}`

- **`[CancelMessageMoveTask](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CancelMessageMoveTask.html)`**
  - **所需的权限:**
    - sqs:CancelMessageMoveTask
    - sqs:ReceiveMessage
    - sqs:DeleteMessage
    - sqs:GetQueueAttributes
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{dlq\_queue\_name}}

- ** `[ChangeMessageVisibility](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibility.html)` **
  - **所需的权限:** sqs:ChangeMessageVisibility
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ChangeMessageVisibilityBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibilityBatch.html)` **

- ** `[CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html)` **
  - **所需的权限:** sqs:CreateQueue
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[DeleteMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessage.html)` **
  - **所需的权限:** sqs:DeleteMessage
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[DeleteMessageBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessageBatch.html)` **

- ** `[DeleteQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteQueue.html)` **
  - **所需的权限:** sqs:DeleteQueue
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[GetQueueAttributes](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueAttributes.html)` **
  - **所需的权限:** sqs:GetQueueAttributes
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[GetQueueUrl](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueUrl.html)` **
  - **所需的权限:** sqs:GetQueueUrl
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ListDeadLetterSourceQueues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListDeadLetterSourceQueues.html)` **
  - **所需的权限:** sqs:ListDeadLetterSourceQueues
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- **`[ListMessageMoveTasks](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListMessageMoveTasks.html)`**
  - **所需的权限:**
    - sqs:ListMessageMoveTasks
    - sqs:GetQueueAttributes
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{dlq\_queue\_name}}

- ** `[ListQueues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueues.html)` **
  - **所需的权限:** sqs:ListQueues
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:\*

- ** `[ListQueueTags](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueueTags.html)` **
  - **所需的权限:** sqs:ListQueueTags
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[PurgeQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_PurgeQueue.html)` **
  - **所需的权限:** sqs:PurgeQueue
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ReceiveMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html)` **
  - **所需的权限:** sqs:ReceiveMessage
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[RemovePermission](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_RemovePermission.html)` **
  - **所需的权限:** sqs:RemovePermission
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[SendMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html)` **
  - **所需的权限:** sqs:SendMessage
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[SendMessageBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessageBatch.html)` **

- ** `[SetQueueAttributes](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SetQueueAttributes.html)` **
  - **所需的权限:** sqs:SetQueueAttributes
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- **`[StartMessageMoveTask](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_StartMessageMoveTask.html)`**
  - **所需的权限:** sqs:StartMessageMoveTask / **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{source\_queue\_name}}
  - **所需的权限:** sqs:ReceiveMessage
  - **所需的权限:** sqs:DeleteMessage
  - **所需的权限:** sqs:GetQueueAttributes
  - **所需的权限:** sqs:SendMessage / **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{source\_queue\_name}}

- ** `[TagQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_TagQueue.html)` **
  - **所需的权限:** sqs:TagQueue
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[UntagQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_UntagQueue.html)` **
  - **所需的权限:** sqs:UntagQueue
  - **资源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}