Add sqs:ChangeMessageVisibility permission to Queue

getlift · Mar 7, 2023 · 9b9dab2 · 9b9dab2
1 parent f408415
commit 9b9dab2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/constructs/aws/Queue.ts b/src/constructs/aws/Queue.ts
@@ -282,7 +282,7 @@ export class Queue extends AwsConstruct {
     }
 
     permissions(): PolicyStatement[] {
-        return [new PolicyStatement("sqs:SendMessage", [this.queue.queueArn])];
+        return [new PolicyStatement(["sqs:SendMessage", "sqs:ChangeMessageVisibility"], [this.queue.queueArn])];
     }
 
     extend(): Record<string, CfnResource> {

diff --git a/test/unit/queues.test.ts b/test/unit/queues.test.ts
@@ -117,7 +117,7 @@ describe("queues", () => {
                             // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
                             Statement: expect.arrayContaining([
                                 {
-                                    Action: "sqs:SendMessage",
+                                    Action: ["sqs:SendMessage", "sqs:ChangeMessageVisibility"],
                                     Effect: "Allow",
                                     Resource: [
                                         {